Recently I visited a customer that heavily invested in security intelligence, incident response, cyber security, SOC, ISMS, awareness campaigns and governance but still after all these investments they did not have the feeling to be in control. Their feeling was also nurtured by data breaches and information leaks that were still happening in this professional and technical environment (they took all organizational and technical measurements that you can think of).