These are things I’ve observed often enough that they may as well be physical laws.
Many of these are jokes.
Everything is a people problem.
People will ignore the zeroth law and blame technology at every opportunity, further reinforcing the zeroth law.
After every security breach that receives significant media attention, the breached organisation will issue a public statement containing the phrase “We take security seriously.” This law also holds if the word ‘security’ is replaced by ‘privacy’.
Sufficiently advanced incompetence is indistinguishable from malice.