No more surprises? ISIS Achilles' heel is defending what it has won