Resume after hibernation security issue ?

Not sure if anyone else has reported this (and the search on the forum is PATHETIC!).

Anyways, I noticed that if I hibernate and then resume from hibernation, the computer isn't locked (I'm on a domain account).  This is a huge security hole as what's to prevent someone from taking my computer, turning it on and just picking up where I left it without any login ?