Context I wrote this some time ago as an internal memo for marketing and product to help craft value propositions to sell security tools to security teams. I’ve noticed some confusion around the objectives of security teams and I’d like to share my perspective, hoping to clarify matters. Please note that these are just my opinions based on my experiences as a security persona across various organizations. What is the goal of a security program?