Cyber leaders from the U.S. Marine Corps and Splunk highlight how agency assumptions about risk and requirements have changed for the better.