The companies most exposed to a crisis are not always those that have neglected security, but those convinced that resilience is already in place. This article presents four organisational profiles in which a false sense of security can delay necessary action.