You buy the safe after the robbery.

No one installs the safe before the robbery. They install it after. The alarm goes in after the break-in, the second lock after the first theft, the policy after the loss that taught them they needed it. This is not carelessness. It is human nature. Risk that has not yet arrived does not feel like risk at all — it feels like an expense you can defer. So we defer it, almost every time, until the event makes deferral impossible.

The same pattern governs digital gold, with one difference that changes everything. Firms adopt private, sovereign infrastructure after a breach, not before. The breach is the teacher, and its lesson always arrives attached to the damage. The budget is approved the week after the headline — never the week before.

The asset that cannot be recovered

Here is where the comparison to the safe breaks, and it breaks in the direction that should concern you. When a thief empties a safe, you still have the building, the business, and whatever was not inside it. You install the better safe, you recover, you carry on. The safe bought after the robbery still has a purpose, because there is still something left to protect.

A breach offers no such mercy. What leaves does not come back. A copied file is copied forever — retained, indexed, traded, and used on a timeline you do not control and cannot end. You cannot un-expose a client list, un-leak a case file, or recall a decade of privileged correspondence. The privacy system installed after the breach protects an empty room. The gold it was built to hold is already gone, and it is gone permanently.

Expensive upstream, trivial downstream

Sovereign infrastructure looks expensive measured against a quiet quarter. It looks like almost nothing measured against the thing it prevents: the client who leaves, the licence that is pulled, the reputation built over thirty years and ended in a single afternoon. Protection priced against what it protects is not a cost. It is the cheapest position you will ever be offered.

And the logic compounds in your favour. The more you have to protect, the cheaper the protection becomes in relative terms — a largely fixed defence standing in front of a loss that scales without limit. This is why every serious discipline of asset protection shares a single rule: it is put in place before the event, never after. After the event, there is nothing left to protect. There is only the accounting of what was lost.

The only question that matters

So the question is not whether sovereign infrastructure is worth its price. That question dissolves the moment you name the downside honestly. The real question — the only one — is simpler, and it is the one worth sitting with: how much do you have to protect?

If the answer is a number you could absorb, the safe can wait. If the answer is a number you could not survive losing, the timing has already been decided for you. The safe goes in before the robbery, or it does not matter that it went in at all.

Asset protection is a decision made before the event — or a regret carried after it. The only question is how much you have to protect.