In business there are two ways to learn; direct or indirect experience. When it comes to security, the clear winner should always be indirect experience.