When your team is not securing the site