We see a lot of zero-risk bias in society, especially when looking at terrorism, crime and law enforcement, and public safety issues. The challenges are discussed in the frame of the elimination of crime and risk. This is obviously absurd. Crime and risk can me managed and minimized, not eliminated. The same is true when it comes to cybersecurity. Listen to people talk about information security. It’s not framed as an acceptable reduction of risk, but as absolute reduction of risk.