Wolves, sheep, and cybersecurity

 Cybercriminals are wolves. The rest of us are sheep.

The ubiquity of the internet has made it much easier for wolves to eat sheep at very low risk. This is causing an explosion in the wolf population.

Under pressure from predation, prey animal populations will gradually adapt or die.

Each individual sheep (person or organization) has two things it can put effort into. One is trying to protect itself from the wolves. This looks like organizational cybersecurity plans that actually reduce risk. 

The other is working with the rest of the flock to evolve new behaviors that reduce the risk overall. Compliance efforts show all the other sheep that an individual is doing its part to be a good member of the flock. This eventually helps protect the flock, but does nothing to reduce the risk to the individual sheep.

Will the flock adapt into new behaviors that reduce risk before most of the sheep get eaten and the rest turn into wolves?

Just remember that whether it's by the wolves or the shepherds, the sheep always get fleeced.