The second worst security mistake - thinking about it last
2. Viewing security as an add-on
When a system becomes relied on by the business for day to day work, it is too late to realise that it is impossible to secure adequately when that inevitable incident occurs. If security is designed in from the start, these problems can be avoided.