Some clients are surprised that when we layout our plan to develop a Risk and Security plan that it involves not only interviews (among other steps) with senior management but also front-line staff including remote staff, vendors and in some environments their clients.
This mixture of perspectives we believe draws a more holistic, better yet, realistic picture of risk and security plan perception by the very people using and interacting with the plan constantly and consistently.