With bad guys frequently upping their game, security can’t leave these protections to a once-a-year upgrade.