Recent security statistics should be a reminder to those in IT security to identify and apply security controls consistently across their organization.