I added two arrows to connect the dots:

1. the arrow from security controls to engineering suggests security controls are implemented in engineering projects.
2. the arrow from engineering to security operations to depict the one-time engineering investment turning into sustainable/persistent value creation.