Cyber thieves work 24/7 trying to breach network security measures and companies that don’t do the same in protecting thing networks will eventually get hacked.

I recall from the late 1990s, the engineering R&D company I worked for had a growing intranet and one incident caused them to rethink network security.
Without giving out specifics, what they did do is hire a then colleague’s son who had previously gotten into some serious trouble with the feds by hacking certain networks.

The kid was giving free range to hack any internal network and then point out to the IT engineers the various network vulnerabilities and worked with them to correct the problems. Today that same kid is a highly paid cyber security expert and a partner in a cyber security firm.