Why assume the attacker is already inside?

“Because sooner or later that is reality: phishing, reused passwords or a vulnerability grants access. Assume Breach shows the consequence of that first click — and where the chain can be broken.”