We already know information security is in dire shape, so let’s get on with fixing it — because we do know how.