One of my hotter professional takes is that cybersecurity is no longer a fast-moving industry and that we've had a pretty solid notion of how to do security right for at least a decade.
Our problems these days are more about making sure those things get done than in figuring out what the right thing to do is.