The department, along with other federal entities, has shifted from the perception “that you will have a perfect defense system if we just build our cyber walls high enough.”