It’s important to assume you have been vulnerable for months if not years, and to plan and patch accordingly.