“Do I communicate with my strategic partners on a consistent basis about security and the role of security, and not just when an incident of non-compliance occurs?”