How secure is your IT really? This question sounds simple, but it's surprisingly difficult for many companies to answer.