After a tumultuous period of reactive steps, now is the right time for security and risk pros to get their long-term plans back on track.