Security starts with knowing your weaknesses