Security leaders and CISOs were being asked to make high-stakes decisions based on partial signals.