A failed Risk Management

I have created a small self-explanatory diagram that explains how front-line defences are often useless while your internal security architecture is not up to the mark.