I am becoming certain that every company will get penetrated at some point. E.g. a poorly configured WordPress box... What happens next is what matters. Least p

I am becoming certain that every company will get penetrated at some point. E.g. a poorly configured WordPress box... What happens next is what matters. Least privilege, prevent east west movement, logging aggregation with anomaly detection, notice data exfil, etc. Defense in depth is what matters.