Cyber security is a continuous process, not a destination. No matter how well you’re prepared, chances are you will be compromised at some point. Along with a strong security defense strategy, you need a comprehensive plan on how to investigate and remediate a breach.
The threat landscape is complex and constantly evolving. In this never-ending arms race, the bad guys change tactics, techniques and procedures (TTP) daily. Unless you're in the cyber security business, you can't possibly throw enough budget or staff at the problem to keep pace. Consequentially, security becomes an exercise in risk management. Your leadership team must decide what level of risk your organisation will accept.