Majority of IT security pros say their infrastructure has gaps