Executive personal cyber is a governance category, not an IT category. It runs adjacent to the enterprise cyber program, never nested inside it.