Assessing security governance in the UK and Scotland under current arrangements