1. Overconfidence 2. Bypass corporate controls 3. Negligence towards false positives 4. Failing to review the environment as a whole 5. Disregarding the user 6. Letting your skills lapse 7. Not patching immediately 8. Alert fatigue syndrome 9. Relying too heavy on third party vendors 10. Ignoring the business side