A tech-leader perspective: without mandating a single tool, how to define portfolio policy, scenario routing, budget, security, training, and metrics.