The bigger they are, the harder they fall If we think the headlines shocked us with Equifax, SEC, and NSA – we will learn that large organisations have poor cyber security hygiene, are not meeting regulations, and are failing to enforce the policies they developed, recommend, and enforce on others. Next year’s news will have even more high-profile names and the root causes will be as shocking as the OMB breach.