This case study walks through assessment, remediation, and long-term governance that produced measurable risk reduction.