To turn secure configuration into a continuous and enforceable control not a yearly project.
To make prevention practical by aligning hardening to business impact and keeping it stable in production.
