When IT leadership identifies the impact that a system or application has on the organization and the reporting reflects that, the person on the ground starts to begin to prioritize which of the things they should work on. By doing this, and reporting the progress on these specific applications, it provides the tactical leadership a means to analyze the security posture (in this case) of the systems with the highest impact to the organization: