Spending by the US government and industry to prevent the predicted year 2000 (Y2K) crisis amounted to approximately $100 billion, and other global spending may have been even greater. This study examines the lessons for critical infrastructure protection learned from the crisis that didn't occur.