Businesses shut down at night, the best time for cybercrime attacks, but IT systems are left on. Firms need to be prepared to detect activity at all times and take some form of action. It is impossible for firms to achieve 100 percent security. There are many reasons for this, such as antivirus software only working against known viruses and staff causing problems due to a lack of understanding. A firm should think of its business as a bank.
Bank vaults have large, secure doors to slow down bank robbers.
The bank also installs alarms to alert the police to any break-ins, so the bank needs to ensure the time delay from breaking down the door is more than the police response time. If somebody is trying to break in, and is allowed endless time, all security barriers will eventually be defeated. It is important that firms put in place measures to detect and react to any attacks. If the company succeeds in tying the two functions together, the system can try to make the attack fail. If this is not successful, it can limit the damage and then restore service.