Technology modernization for it's own sake doesn't work; business owners need to be involved from day one, and made aware of the security considerations.