Every reported breach has by definition circumvented existing security measures. Planning to protect alone is insufficient; we must be breach-ready. In this session, Kevin will look at measurably reducing the internal attack surface and blast radius, containing an initial compromise, and preventing the spread of ransomware or unauthorised activity.