A large organization has a small centralized information security management team, but most information security work is devolved to the many independent produc...