Jeff Smith, American Axle and Manufacturing, talks about how organizations need to evaluate their own security risks, first, and then security standards.