The sheer size of enterprises’ networks – let alone the volume of devices and data running on those networks – leaves them open to attacks. These malicious hacks can spread from individual end-users; throughout an organization’s systems and infrastructure, out to entire industries. Traditionally, network security has used tactical policies such as device hardening and firewall audits. But reliance on security point solutions and triage of hacks after they occur is not enough. Companies need to take a dual approach, on a tactical level detecting where vulnerabilities are located and how they can be fixed, and on a strategic level ensuring their networks are designed with security in mind and kept secure, up-to-date and compliant.