Pregunta de entrevista de Puffy

How do you approach building and maintaining a security compliance framework within a large engineering organization?