Security - multivariate, multidimensional events

 Given multivariate,  multidimensional events generated by adaptive human agents, perhaps it  would not be too far a stretch to claim that no two events are precisely  the same. Given the absence of actuarial data, what can a poor security  architect do? 

 Answer the question with a short paragraph, with a minimum of 300 words in APA format with in-text citations. Minimum of two references are required.