As security practitioners, we face an uphill challenge, not just with defending our organization, customers, and data; but we often struggle with effectively implementing our strategies, processes and controls in order to effectively do so.