@brian_greenberg@infosec.exchange That all sounds like excellent advice and starter material, but the problem is doing it right the first time takes time and money up front and a very small minority of senior business management has the patience and confidence in their position to spend that up front time and money, or at least that was my repeated experience back in the day selling software engineering process improvement solutions and my company's strategic management software and services of a similar ilk.