Yes, but it should be remembered that in businesses, most attackers aren't coming in from the outside, they're coming from inside the secured network. They can be disgruntled or criminal employees and contractors, and they can also be IoT devices that establish connections to outside destinations.
Biting the hand that feeds IT
