There are three layers of risk: known knowns, known unknowns, and unknown unknowns. Cybersecurity is about preventing the first, preparing for the second, and praying that the third will never happen.