Explain that without the underlying business to generate revenue and use information, it has a likelihood to lose value and the need for it would go to zero.

Stress that the decisions that need to be made with respect to information security and their assets should be done carefully and holistically.

Emphasize that the responsibility of protecting information within an organization is everyone’s responsibility. Regardless of their title, rank in the firm, or position, everyone must proactively protect the data it stores and uses.