A complex adaptive system has multiple feedback loops and second-order effects; pulling one lever (tightening hiring criteria for security) produces unintended consequences elsewhere (loss of creative problem-solving, higher costs), suggesting that institutional designers need to think through systemic consequences rather than assuming isolated lever-pulls.