How a Lean Security Team Turned Tabletop Exercises into Live, Continuous Validation with Picus