aligning security with company goals