“The greatest failure of security policy is the belief that there is no threat.”