Forget the model. When it comes to cybersecurity, it’s all about the harness