A lost laptop on a business trip. A single employee clicking the wrong link. A delayed patch that opens a week-long window for attackers. That’s all it takes for sensitive…