Too many companies are caught up in security theatrics, overlooking the real cause.