4 Critical Mistakes IT Security Professionals Must Avoid