Security budgets were built to keep intruders off the network, and that model now has the priorities backwards.