"In security, there's a general belief we all have – it's not whether or not you will be breached or attacked, it's a matter of when,"