An organization gives one corporate security team the authority to set policy and make security decisions for every business unit. What type of governance structure is this?