The bigger they are, the harder they fall If we think the headlines shocked us with Equifax, SEC, and NSA, we will learn that large organisations have poor cyber security hygiene, are not meeting regulations, and are failing to enforce the policies they developed, recommend and enforce on others. 2018's news will have even more high-profile names and the root causes will be as shocking as the OMB breach.