Security leaders have to balance security with maintaining company and user privacy.