Reducing security complexity doesn’t require sacrificing information security for defense and intelligence community organizations, says a new report.