running security-minded organizations