Monday begins with your security manager updating the risk register. Two days later, a developer changes a cloud access policy. By Friday, a revised security