How Many Security Mistakes is Too Many?

How many security incidents is 'too' many? At what point should a clearance holder lose their clearance for breaking the rules?