“Is our understanding of an assigned task based on a common, consistent philosophy that is clearly understood by both the security organization and our business partners?”