How do you plan to handle security (both network and employee)? Target was breached through their HVAC system (which was linked to internal networks in some pl

How do you plan to handle security (both network and employee)? Target was breached through their HVAC system (which was linked to internal networks in some places). It's suspected that a bad actor got a job at their HVAC vendor long enough to find some good vulnerabilities, and then just went to town.