They should clearly understand their role in the security chain and be provided with support, in tools and education.
You should know what you want out of tool technically and functionally, and you must clearly understand how the software solution will fit with and support your business processes.
Controlling the chaos also means that we need to clearly understand our options, cost and benefits of each option and reduce the undesirable consequences of change to the minimum.
