text: Such a rating system provides not only a measure of performance and awareness , but it also places primary responsibility for information security with the managers whose operations depend on it .
  
  ###
  
  Under this rating system , managers will have no responsibility for making sure information is secure .