A large organization has a small, centralized information security management team, but most information security work is devoted to the many independent produc...