2014 was the year of the breach. It included admissions from Target, Home Depot, and even Dairy Queen. The public sector alone experienced 50,315 incidents, and over 300 confirmed cases of data loss. The gap between time to compromise (in days or less) and the ability of defenders to discover a breach in the same period remains vast. The odds are more often than not stacked in the attackers favor. Attackers only need that one break to get inside, but defenders have to “get it right” 24 hours a day 365 days a year.”]
Source: https://www.csoonline.com/article/2979774/think-your-security-strategy-is-up-to-par-think-again.html