Great post Christian. Tying security policies to business priorities is vital and this highlights why.