While users are responsible for initiating 90%+ of losses, it is
not their fault. The entire system is what enables the losses, and
the entire system must be designed to prevent them. Drawing lessons
from safety science, counterterrorism, and accounting, this
presentation details how to expect and stop user initiated loss.