assume breach
expressionsecurity
The security posture that plans as if attackers are already inside, because someday they will be.
It reframes the job from building a perfect wall to limiting what a successful intruder can reach: segmentation, least privilege, detection, rehearsed response. The grim industry version: there are two kinds of companies - those that have been breached, and those that do not know it yet.
Also known as: assume compromise