Why an integrated approach to security is no longer a choice