Security Program Design

How organisations structure security work: which controls exist, who owns them, and how coverage is measured against a chosen model or framework rather than against a tool inventory.