While it’s impossible for an organization to be completely secure, there’s no reason to be defenseless.