Security Manager's Journal: Acquisitions need early security review