Collaboration between departments and a better understanding of organizational metrics are key to addressing security blindspots