No matter how big or small a firm is, security is never perfect. An understanding of this is a giant step toward building cyber resilience.