IT security pros need new strategies to fund their initiatives, according to an RSA panel.