Left and right, major CISOs have suffered data breaches despite undergoing best practices for security protection. Threats keep surfacing, and there’s no such thing as “perfect security”. Where should organizations rethink security standards and better assess the risks at hand? Understanding those threats starts at putting higher standards in place, but what would a reasonable set of standards entail? Could they be enforced, will they be adopted, and what added cost and impact would meeting these standards put on organizations and their consumers?