An Attack Pathway Into Your Organization? Reducing risk without reducing operational efficiency