For many years, cybersecurity was relatively straightforward. Install antivirus software. Keep it updated. Run occasional scans. If nothing was detected, everything seemed fine. That approach made sense when most threats looked very similar.

Most businesses spend time thinking about how to prevent cyber attacks. Far fewer spend time thinking about what happens if prevention fails. That is understandable. Nobody wants to imagine their systems being compromised,