Every January, I watch companies make the same mistake. They treat security planning like a New Year's resolution: lots of enthusiasm in week one, forgotten by February. By March, they're back to ...