Meeting periodically with senior managers to discuss the security implications of new information technology uses being considered .
Never meeting with senior management to talk about IT security implications .