Your security manager updates the risk register on Monday. Wednesday brings a change to a cloud access policy by a developer. By Friday, a revised