How often is your company actually targeted?

Been in cybersecurity for 6\~ years now as a sales engineer. I've definitely seem my fair share of alerts that are genuinely malicious or alluding to terrible security posture, but at a certain point it seems like huge amounts of resources go to monitoring environments where little to nothing ever happens.

Obviously patching and maintaining proper security controls (I.E firewalls, endpoint, email gateway, regular backups, encrpytion..etc) drastically reduces attack-surface and eliminates most 'low-hanging fruit' that will inevitably be targeted, but …

alerts cybersecurity engineer environments fair go to malicious monitoring nothing patching point posture resources sales sales engineer security security posture share