How organizations can enjoy 80% of the security advantages for 20% of the work