“Have I ever asked stakeholders in my organization an open-ended question like, ‘What is security’s role here?’”