Sorry: I'm confused. Are you saying this is why an organization like MITRE cannot build contextual knowledge and expert judgement into itself? Or are you saying this is how computer security differs from radar and/or communications systems engineering?