I was researching cyberattacks, and a common theme popped out. “We had an unprecedented cyberattack… and we shut down our operations to protect stakeholder interests.” I know, breaches can be strenuous. The initial hours following a breach are often marked by chaos and urgency as crisis leaders call vendors, disconnect systems, analyze logs, and brief executives. The focus is on containing the damage. But over time, the organization has grown into a connected digital enterprise, with everything seamlessly integrated. And this is why companies shut down entire operations. But as soon as order is restored, after the initial chaos, stakeholders will question why, despite so many security tools, the defenses were...