As discussed in the previous section on risk analysis, the central security groups served primarily as advisers or consultants to the business units, and, thus, they generally did not have the ability to independently dictate information security practices.
259074
The previous section explained that central security groups act as consultants or advisers to business units.
259075
The previous section section didn't cover how central security groups act as consultants or advisers to business units.