Yes, that is the correct way to approach security. Preventive measures alone are not enough to secure an organization. In the security world we refer to this c

Yes, that is the correct way to approach security. Preventive measures alone are not enough to secure an organization. In the security world we refer to this concept as "Assume Breach" and to throw in a buzz word you might hear often these days "Zero Trust". Joking aside, Assume Breach, Zero Trust and what I call "Homefield Advantage" are the main strategies to help secure the modern workplace in my opinion.