The Four Dimensions of Building a Security Program