25 years after 9/11, we’re still fighting the last war

An institution that stops updating its threat model is getting ready for the next threat to take it by surprise.