The conclusion is almost uniform when you ask any seasoned cybersecurity executive, analyst, lawyer or engineer – there is no such thing as a foolproof plan. One way or another, organisations must operate under the assumption that a bad guy will get in at one point.
This doesn’t have to mean calamity though, with preparation and planning for the worst to occur the best form of risk mitigation.