This is definitively one of those moments where you run this scenario in your head at your work place. "When's the last time we audited staff permissions, disabling USB access if not already, did I properly segment that network from the rest, backups still good, etc...". Can you even justify not having a Zero Trust environment at this point?
