Cybersecurity benefits from a focus on the vital few chores rather than the trivial many. Find the right things to encourage strategic thinking, then move the culture needle to promote that policy.