Currently, Security and Compliance is under the Provisioning category and has ~30 items in it:

https://landscape.cncf.io/?group=projects-and-products&project=cncf&category=Provisioning

Since security spans provisioning, deployment, and runtime, it may be best to move it to a top level category and have sub-categories in it:

• Security and Compliance
  • Runtime
  • Policy
  • Identity
  • Secrets Management
  • Key Management

Key Management is currently under Provisioning, as a peer to Security and Compliance. It can be moved under Security and Compliance and potentially combined with Secrets Management.