Security isn’t a one-time investment: 3 key areas where most organizations fail