Every organization eventually asks the same uncomfortable question: what happens if we get hacked tomorrow? Most businesses don't have a real answer. They have antivirus software, maybe a firewall, and a vague hope that bad things happen to other companies.