Improving Security Maturity in the Age of AI