An offensive security program is an excellent component of a mature cybersecurity program, but kicking off that process can be overwhelming for some organizations.