Security pros talk, but can they walk?