Understanding hacker techniques and processes is the best way to defend against cyber attacks, and focusing on business risks is the best way to get security budget, according to an ethical hacker
https://www.computerweekly.com/news/252463144/Key-lessons-from-an-ethical-hacker