Security is a practice, not a destination.