Focusing too much on protecting only the crown jewels of the enterprise might leave gaps in security for criminals who are seeking other valuable assets. Criminals look for the easiest access point, whether that is the organization that has, Minimal security tools, lax security policies and/or exploitable employees and third party vendor users Public information provides a gold mine of useful tidbits for criminals. Increasingly criminals are patient and take a longer and windier road to reach the final destination of their intended target.”]
Source: https://www.csoonline.com/article/3022258/why-thinking-like-a-criminal-is-good-for-security.html