These are things I’ve observed often enough that they may as well be physical laws.
Many of these are jokes.
Zeroth Law
Everything is a people problem.
First Law
People will ignore the zeroth law and blame technology at every opportunity, further reinforcing the zeroth law.
Second Law
After every security breach that receives significant media attention, the breached organisation will issue a public statement containing the phrase “We take security seriously.” This law also holds if the word ‘security’ is replaced by ‘privacy’.
Third Law
Sufficiently advanced incompetence is indistinguishable from malice.