Security is not just a matter of having the right controls in place. It must involve risk as the means to make decisions based on the business' tolerance and acceptance of risk. Security risk management requires organizations to make decisions based on their individual risk tolerance on such things as machine learning and IoT devices.
2020 Security Priorities Report – Priority 4: Security Risk Management
View the Complete Blueprint:

2020 Security Priorities Report
The key to a more secure future is simple prioritization.