Don't fool yourself that a system is secure. Especially when the IT team doesn't understand what good looks like.