The challenge for security leaders is no longer simply blocking unwanted calls.