Overall adoption of each security control