Over recent years, security and business leaders have had to modify their expectations of what effective cybersecurity can achieve. Long gone are the days when all resources were poured into protecting the corporate network perimeter. Thanks to widespread adoption of cloud infrastructure and services, BYOD and now mass remote working, that perimeter is far more fluid, flexible and porous.
Threat actors can and regularly do sneak into corporate networks today with stolen, phished or cracked credentials, or by exploiting unpatched vulnerabilities—of which there are many to choose from. This means CISOs and CEOs must accept that their organization will be breached, or might already have been. The key is finding those attackers before they have a chance to cause serious damage.