Take threats seriously

Many organizations understand the full extent of the damage that can be done during an attack as well as the aftermath. However, many companies choose to ignore the possibility of such an attack happening to them, or they are willing to accept the risk of not taking adequate precautions due to cost or complexity.