A separate theme to ensure security stays a top-level concern. Includes: * Monitoring and auditing infrastructure * Code review and vulnerability scanning * Policy authoring and reviews