Security As Fuel: E or F?

Most organisations don't address security till they hit "E" with a breach or urgent compliance requirement. They delay and take lightly low-risk situations until they become high risk, or sometimes critical.