For the foreseeable future, with the spigots closing shut, CISOs will need to find ways to do more with less.