Identify and talk about at least one security management goal, then explain a difficulty in meeting that goal.  Offer a way to meet that management goal.