How Goldman Sachs bolstered their security posture through policy management and controls