Do you have a documented security plan that includes a view of the latest threat intelligence (including which attacks are most likely, and when and how they might occur)?
A good security plan will identify your critical assets and the risks associated with potential losses of data, productivity or brand reputation that could stem from an attack or breach. Make sure your documented plan accounts for relevant industry regulations and standards, articulates appropriate controls and policies, and is communicated throughout your organization.