Despite cost, it’s time to focus on securing legacy systems and physical infrastructure along with digital systems.