Why most enterprise security teams would fail a military readiness test