Deciding what you are actually defending against before buying tools — the step almost everyone skips.