Security management decision-making strategies