LoL, just playing with my thoughts here: isn’t solving problems the best way to avoiding future problems?

I ‘sell’ information security. Most people/companies don’t care about avoiding such problems until they have to solve one.