A CIO tells you, “We regularly review all of the potential vulnerabilities of our information systems and networks. We implement hardware, software, and procedures against any potential event, no matter the cost.” What do you say to this executive?