To support and retain the people who protect assets against bad actors, organizations should create a more defensible environment.