Security failures rarely begin with dramatic negligence or deliberate misconduct; they begin with a quiet confidence that yesterday’s success is sufficient protection for tomorrow’s uncertainty. “This has never happened before.” “Why would anyone target us?” “This is how it works here and it’s still fine.” These statements do not sound reckless. They sound reasonable. They sound experienced. They sound like organizational memory at work. As Daniel Kahneman, Nobel laureate and