You can deploy all the most modern cyber defenses, state of the art threat identification and detection, advanced cyber risk management (Continuous Controls Monitoring), 3rd Party Risk Measurement, Management and Mitigation and one immutable fact remains - you are going to be hacked; successfully breached.  Regardless of your budget, technical expertise and commitment, you are going to be a victim of a successful cyber attack.  Given the inevitable, you need to have a plan, an Incident Response Plan, for when that eventuality knocks on your door...  A few thoughts on the criticality of an IRP for Cybersecurity Insider.