In security response, practice makes perfect

We’ve heard it many times in many forms — expect to be breached, expect that you’ve been breached, expect that you are being breached.

The unfortunate reality is that most organizations don’t even know that they’ve been compromised and therefore don’t do anything to block spreading of the malware, control the damage, prevent loss of information, or even recover from the technical problems associated with the compromise.