If you're not paying attention (situational awareness), instead of the saying "it's not a matter of if, it's a matter of when a breach happens", maybe it's more accurate to say "it's not a matter of if, it's a matter of when the breach already happened".