Assists organizations in achieving real risk reduction by ensuring that they have the people  technologies  and processes in place to enable business operations while preventing  detecting  and responding to attacks by sophisticated cyber adversaries