Most breaches are not in the interests of management, but they happen anyway as management wants to save money or doesn't understand how it could happen.