mnli premise: The information security management practices identified in GAO's executive guides have been incorporated into policy guidance at many federal agencies. hypothesis: GAO is the leader in information security management.