An industry-wide laser focus on vulnerabilities has left cybersecurity teams without enough room to strategize for resilience.