Thanks a lot for this comment, BTW. Still, I think we [here we stands for “you and me” :-)] kinda stopped a bit short of per asset / per network dimension of coverage. We did do control types, but not what assets/systems/data the controls cover, right?
Originally published at Medium.