Taking an Operational Approach to Next-Generation Security