Work terminal security into operating plans, says consultant