Do More by Doing Less
https://www.linkedin.com/pulse/why-companies-defenseless-against-cyberattacks-what-o-keefe-ph-d-/
"Winning is about a deep understanding of your own strengths and weaknesses as well as the enemies. What is wholly missing in enterprise IT security is the latter: a strategic sense of vulnerability has given way to an unearned confidence in security products and best practices, comfortably layered into the localized IT bureaucracy that rejects change, embraces process over results, and like the French admiring their Maginot line, imagines they are safe."