When a prospect says 'We already have security covered,' what is the most effective CSS response strategy?