Your organization doesn't have a visibility problem. It has a risk surfacing problem.