Major breaches have created a sense of urgency around securing high-value assets (HVAs) in federal agencies. In May the Department of Homeland Security released binding operational directive (BOD) 18-02 requiring agencies to take new steps in identifying and mitigating the vulnerabilities in their own HVA systems. But agencies need to ask themselves first whether they have the right tools for the job.