Forrester offers some sensible security advice: put systems in place that will help you to understand and analyze events, to respond to them efficiently and effectively, and to recover quickly because bad things will happen, no matter what you do. However, to try and eliminate every exposure will be very costly, and probably impossible.