|Image source: imsmartin|
Assuming the adversary makes it in, the question remains: How long after a breach occurs can the organization remediate and prevent further damage?
Which state is your CU in? Waiting to be breached? Already breached? Don't know? Regardless of the state, you should read the article to learn more about some best practices in response.