A security dashboard can look reassuring. Endpoint protection is running, multifactor authentication is enabled, and the firewall is in place.