1. Why does a manager need to participate in security decisions?
2. What kinds of security decisions should general managers need to make versus the kinds of decisions that IT managers need to make?
3. How much impact can a manager make in a technical area like security?