Improving Security Processes Through Continuous Efficacy Assessment and Mitigation