Gartner recommends that all teams should operate under the assumption that security breaches will occur, the only variable factors being the timing, the severity and the response requirements.

Cyber criminals are constantly updating their tools and methods, while finding ways to optimise their business models to maximise profits. As new, global adversaries emerge, established players keep optimising and building out capabilities to affect more types of systems, widening the scope of possible victims in the process.