Businesses fail to defend adequately against data breaches on two fronts.
The failure to defend consumers is hardly surprising. Profit motive driven businesses ignore customer and third party losses unless those losses also impose significant losses on the business.
But why do they fail to defend themselves?
To answer, we need a more precise picture of what counts as adequate defense.