To help ensure that managers fulfill this responsibility , they are provided self-assessment tools that they can use to evaluate the information security aspects of their operations .
Managers are on their own when it comes to self-assessment and security .