Although it may be possible to prevent all breaches, it is also sensible to have an ability to detect breaches. Done correctly, this means that incidents can usually be contained before expensive data-loss occurs. Additionally, under GDPR, there is a requirement to be able to detect breaches.