A university discovering redirected payroll has suffered an incident. An employee who was not paid has suffered a loss on a specific date.
A firewall configuration describes the network behind it and carries the keys. Reconnaissance completed in advance, for every customer at once.
Sanctions work against organisations that need the financial system. A state intelligence service has no revenue to interdict.
Each hop between merchant and issuer is a copy, and the cardholder chose none of them.
Containment converts an unbounded loss into a bounded one, and moves it onto whoever needed the service that week.
A quorum counts signatures. Security depends on the independence behind them, and code enforces only one.