Why security comes last IT managers face a dilemma. The foundation work that's essential for effective network security is inherently boring.