As a senior Programme Manager, you've been used to asking specialists to advise you on whether the capability is secure and achieve milestones like accreditation. What is wrong with that?

Security Managers often try to apply as many controls as they can. This is to ensure that the capability is secure as possible, regardless of the success or failure of the capability achieving its objectives.