Or one rouge employee away from being compromised. Or one social engineering attack away from being compromised.