Playing Catch-Up: IT Departments Face Security Dilemma