Denial and/or ignorance assumes the risk due to loss is low, because those managing the risk assume that one or more of the elements of the risk equation are zero or almost zero, or they are apathetic to the cost of an incident. Risk (of something) is the product of some measurements of Vulnerability X Threat X Asset Value, or R = T x A x A. In the interest of capturing the thought, I offer seven security strategies, summarized. None of the strategies listed listed tools, techniques, tactics, or operations.”]
Source: https://taosecurity.blogspot.com/2019/11/seven-security-strategies-summarized.html