CISA’s “Bad Practices” aims to drive out common-but-dangerous practices that risk national critical functions. With focus on “Best Practices,” people have become tolerant of dangerous practices. Attacks on water, food, and hospitals, command the attention of both poor and well-resourced operators. This session will confront competing priorities, incentives, resource limitations, and discuss ways forward.