[antonvs]

The cycle usually goes something like box ticking, complacency, security scare, remediation, rinse and repeat.