Skilled cybersecurity professionals are in short supply, and when they leave, institutional knowledge disappears.