The State of Enterprise IT Security