A surprisingly high--unreasonably high, in fact--number of organizations think their security program is part of the vanguard of risk management. More...