It’s been my experience that without regulatory heat it takes a massive, embarrassing mistake to get traction on internal tool lockdowns and security.