I think every organization needs to assume that they are compromised.