Security leaders need to maintain the bigger picture of their work, assessing risk on an ongoing basis.