“So not only do we need to deal with threats as they emerge, we have to be thinking in anticipation of future threats, and the things we do have to be things that enable the system to continue to work.”