Encapsulates security concerns and threats from an enterprisewide viewpoint. Supported by internal and external knowledge databases containing reference materials and good practices.