To be a solid security organization, you have to look at all layers of protection.