“Try to establish that target state together with your CISO, together with even your CIO.”

Transcript evidence from Irfaan Santoe -- The Power of Strategy in AppSec.