enterprise. Recognizes and evaluates business security risks while defining appropriate risk-mitigating controls and technologies... controls and technologies to mitigate identified vulnerabilities and improve the organization's defense capabilities...