What to do in the age of the critical breach