Protecting business processes is a key point, and more security orgs need to focus on this for awareness. Good post here