#risk management

Left alone, your portfolio quietly drifts toward whatever has run up the most, right before it usually runs down. Rebalancing drags it back to your target and forces you to sell high and buy low without thinking about it.

Change Healthcare's Citrix portal had no MFA. Equifax had a free patch sitting on its own internal listserv for two months before attackers walked in. Companies don't fix vulnerabilities because the expected-value math, run honestly, genuinely points at inaction, and every breach press release that reads the same is what that math actually produces.