New security objectives and approaches call for shifts in architecture and operations — but more importantly, for security leaders to reassess their investments in their most valuable asset: employees. Complacency, a widening gap between skills and talent, a lack of diversity, and a focus on technologies over people are threats to the business. In an environment of competitive hiring and fast-evolving threats, security leaders must invest in professional development and growth for themselves and their staffs. This is an update of a previously published report; Forrester reviews and updates it periodically for continued relevance and accuracy.