Dashboards, gap-analyses and risk assessments make security gaps visible before they become a problem.