“You wouldn’t give an untrained person cheese and eggs and expect a perfect soufflé. But many companies seem to think that security is something you get by throwing a lot of money at hardware and ...