Common mistakes that limit security teams' effectiveness include piecemeal patch management, a lack of incident response plans and insufficient monitoring.