The activities of sophisticated cyber hackers have evolved into a true industry, increasing investment in their capabilities and services by 24% a year and implementing business practices you would expect from a Fortune 500 software company, including offering service-level agreements, ‰ÛÏmoney-back‰Û guarantees and revenue sharing. The old model of security is collapsing under the brunt of their innovation. To protect our organizations from the future capabilities they will generate, CISOs today will have to consider how we should be investing differently to mitigate the risk before, during and after attacks.