Down the Security Rabbithole (enterprise risk)