> Security people don't seem to really assess what are the actual consequences of breaches. Just that they are "really really bad" and No Security people are

> Security people don't seem to really assess what are the actual consequences of breaches. Just that they are "really really bad" and No Security people are acutely aware of the consequences of a breach. Look at the catastrophic consequences of the recent wave of ransomware attacks. Lax security at all levels, victim blaming (they clicked a link....) and no consequences I know of foe those responsible for that bad design