Are sloppy security controls actually beneficial to a company during a breach?  This is an elephant in the room for Incident Response...