Data breaches and loss can be costly in terms of reputation, financial losses, and time to remediate attacks. The ideal approach combines defensive security controls with proactive user awareness training and strong policies and procedures.