@SeanWrightSec IME a good number of those stem from "just this once" shortcuts in a rush to make a sale/deadline etc - "I had to do it in a hurry". Even, to some extent, crap passwords. So many can be resolved by addressing the underlying management issues.