How do security and governance get handled?

“They should be designed into the workflow before it scales. The exact controls depend on the workflow, the data involved, the systems it touches, and your organization's requirements. Use a formal security and architecture review for the claims and controls that matter to your environment.”