It’s on security leaders to shift their security strategies to better fight against identity-driven attacks.