There's insider risk. Someone who's job it is to maintain security is most able to breach it. There's also "hidden back door" risk. Programmers may code in mea

There's insider risk. Someone who's job it is to maintain security is most able to breach it. There's also "hidden back door" risk. Programmers may code in means to get at data for code testing or government sharing purposes, which the security people may or may not fully understand. I guess you could call these unwarranted assumptions (that insiders are always honest and that no back doors exists or are fully known if they do), but they don't seem amenable to mathematical modeling.