As threat actors continue to evolve, so does the tooling that protects a firm's environment. End point detection and response tooling (EDR) can identify threats and even quarantine a device without intervention from a person. Firewalls can inspect traffic as it enters the firm's domain and block malicious-looking domains and addresses, and multifactor authentication can stop 99.9% of credential-based account attacks.

So why, in the American Bar Association Cybersecurity TechReport, did 29% of respondents answer affirmatively that they'd experienced a security breach in the last year?