A security program has to be holistic.

An agent only needs to find one path, which is why partial coverage isn't a smaller program — it's an opening. You can't run compliance in isolation from operations. You can't report on efficacy without both the leading indicators (risks) and the lagging ones (incidents). And you can't score either without the company's threat profile, known and current. Each part depends on the others — so Adversarial runs all four in an integrated system of record.

Compliance has to stand on real data to mean anything. You can't build financial statements without a general ledger underneath, and you can't build a cyber board deck without a system of record under the covers. That's what TRIC is: Threats, Risks, Incidents, and Compliance, integrated.