• Beyond patching: the value of human expertise in threat mitigation