CIO Lesson: Your system is never as secure as you think it is