How Shadow Incentives Harm Real Security

The hidden incentive to make more money, not to reduce risk, that pushes the security industry toward compliance theater.