Most CISOs can’t answer a simple question with confidence: are the controls protecting our most critical applications ...