focusing on systemic failures rather than individual blame. This is not about excusing negligence. It is about recognizing that in complex organizations, breaches are almost always the product of *systems* — incentive structures, resource constraints, cultural norms, process gaps — rather than indiv