Incorporate current management principles

What roadblocks might you encounter while trying to incorporate current management principles to plan, implement, and audit operating system security in a networked environment?