A new approach and vision, with ongoing awareness and continuous adaptation, along with effective tools, processes, and governance, is necessary to ensure our data and information systems are protected.