Unless you reinstall all your systems simultaneously and close whatever vector was used in the attack at the same time, reinstalling might not help. As long as

Unless you reinstall all your systems simultaneously and close whatever vector was used in the attack at the same time, reinstalling might not help. As long as the attacker has at least one route into the organization at anyone time, the possibility of reinfection exists. So I guess it's wise to take a coordinated approach.