Migrating to security, any gotchas?

I tried the usual recommendations and none of them stuck. This came up at work last week and I couldn't let it go. Not looking for the perfect answer, just what you'd do.