text: As discussed in the previous section on risk analysis , the central security groups served primarily as advisers or consultants to the business units , and , thus , they generally did not have the ability to independently dictate information security practices .
  
  ###
  
  There are many industry experts who have talked about eliminating central security groups in the future .