Your ultimate goal shouldn’t be security perfection — it should be making exploitation of your organization unprofitable.
Source: htdarkreading.com