It's too convenient for companies to toss their hands in the air and find excuses to not upgrade their systems. Security is a shared responsibility.