Security posture is an organisation’s ability to manage its defence of critical assets and data and react to change.