Layered and strict policies help prevent that. When I say strict, I mean the policies. If there is a security incident, you study it but not to blame someone. You study it to see where you can improve it.

My initial security training came from your tax dollars by way of the Marines. With the help of consultants, I designated much of our policy. Some of my employees spoke at Defcon, for example.

It's still possible for failure, but the chances are low. Each person entering is on a list - no exceptions. People who enter are NOT people who called us. We call you, at your HQ, and then do our vetting. Things like that. I am not going to go over all the methods, but we knew who was going into the facility beyond reasonable doubt.

Well, past tense. I'm retired.

You could still get in, but it's going to be difficult and expensive. Nothing is completely secure, nothing.