The book turns inventory, classification, source grounding, approval, monitoring and incident response into one evidence-led operating model.