Every time a new cybersecurity attack makes headlines, a new series of articles comes out stressing the need for any number of security solutions – ranging from basic user training to high-end penetration testing. However, what’s necessary is not a shotgun approach, but a holistic assessment of the gaps your business has, the potential impact of those gaps, and a clear plan for how to close them and mitigate risk.