IT Security Teams Need to Be Able to Take a Punch