Tech measures help prevent and detect intrusions, but you still need working business processes to deal with stuff that gets through The bigger you are, the more likely it is someone will put the effort in (and the more staff you have to argue if responsibilites are ill-defined)