Good security requires an equal mix of prevention and detection/response. "Hackers only need to be lucky once. You need to be lucky every time". And unless you have unlimited IT resources and budget, it's only a matter of time before you experience a cybersecurity incident of your own.