How could we better prepare industry and governments against holistic, hybrid, or second-order attacks? In this article we discuss the importance of addressing systemic and systematic risk management problems to provide holistic risk management and direct advances in technical security, utilising machine learning and artificial intelligence.