Budget gravitates toward exciting new tools while the unglamorous fundamentals — patching, backups, asset management — go underfunded and prevent most actual breaches. Funding boring first is the discipline that separates secure organizations from well-equipped ones.
“Breaches are prevented by the boring stuff, not the shiny stuff.”