The Senate report points to some fundamental cybersecurity errors in terms of people, process, and technology. The notion of a network perimeter is ancient history. The Target breach was initiated through the compromise of one of the retailer’s service providers, a small HVAC company in PA (i.e. outside the network perimeter) Incident response has become a cybersecurity bottleneck. For the first time, the Target team failed to do the grunt work, and lost on “false positive” and “false positives””]
Source: https://www.csoonline.com/article/2226629/lessons-learned-from-the-target-breach.html