The industry has stopped rewarding what works in favor of what sells. But as security leaders with very real risks on the ...