Agencies must ensure they’re properly defining network boundaries and automating security processes where possible to keep pace with evolving threats.