track assumptions through a lifecycle of a product/service/policy

we give choices (even push choices) to users we know won't make good choices - regarding computer security. ~46 min in

it is hard to measure prevention beware of 3rd party trust assumptions / trust laundering