>what are some things I can do to protect my company against complex cyber adversaries? Employ on site Red and Blue teams or pay externals for regular penetrat

>what are some things I can do to protect my company against complex cyber adversaries? Employ on site Red and Blue teams or pay externals for regular penetration tests and security audits that feed back results to your site/infra/dev-ops teams. None of this is new but most businesses ignore them since it's seen as an expensive snake oil and most importantly, "it's never gonna happen to me".