U.S. Department of Energy experienced 132 security breaches in fiscal year 2006. That’s almost two serious security breaches per year for each of the DOE’s 69 organizations. Recent acquisitions or smaller, geographically diverse units that may not fall under full control of corporate headquarters. The key: Be paranoid. Don’t trust traffic coming from remote locations, unless you have some means of guaranteeing that the source is not hostile. Take the necessary precautions to limit what resources the remote systems can access, and inspect all the traffic that comes from a remote source.”]
Source: https://www.darkreading.com/attacks-breaches/keeping-an-eye-on-the-weakest-link