Historically, decisive security action took place only after a disaster had occurred or a specific plot had been discovered.
