IT Isn't Secure Right Out of the Box