I imagine the people at Arup who fell for the scam were confident in their systems protecting them too.