How Agency Built Its Success in Security and Compliance