Earlier Today I was thinking about how to provide guidance on information security decision making to new managers on the field.