With multi-million-dollar ransoms and threats to public safety, the stakes are high. Security leaders can no longer afford to leave vulnerabilities unaddressed for five months or five years.