Balance product change and ecosystem growth with clear security ownership, identity controls and supplier oversight.