I could be wrong but the CEO kept mentioning their "Cyberdefense playbook" and how it dictates immediate shutdown of services at sign of breach. Well didn't th

I could be wrong but the CEO kept mentioning their "Cyberdefense playbook" and how it dictates immediate shutdown of services at sign of breach. Well didn't their Cyberdefense playbook have anything to say about simple ACLs protecting those internet facing systems that were vulnerable to SQL injections? I mean even a very broad ACL allowing an entire country geoip block would be better than nothing.