In a CERIAS blog post, Prof. Spafford uses the Microsoft 365 outage that began 12 November 2026 — spreading from Outlook to Teams, SharePoint, Copilot, and security tooling, disrupting hospitals and governments worldwide — to argue that enterprises warned against single points of failure built a single point of everything instead. He asks leaders four questions, recommends listing what stops when one supplier stops, exercising manual fallbacks, and naming who improvises when AI agents and their vendors are offline.