The hacker wasn't the problem—it was the missing patch

Even if the attack comes from outside, the problem often lies within the organization itself—namely, when software systems are not kept up to date. Patch management is therefore essential.