Attackers don’t have to have the information advantage — security professionals can regain and maintain the information advantage.