Security is not necessarily about preventing the event. In any kind of security investment, there are two parts. One is anticipating the event and the other is that in case the event occurs,  how can you have the strongest resilience to it.