multiple control failures aligned to enable the breach. - **The cost of a $0 patch vs. a $1.4 billion breach** makes the business case for vulnerability management irrefutable. - **Vulnerability assessment must include verification** — scanning alone is insufficient.