Preventing all data breaches is an unrealistic goal. Instead, focus on finding and minimizing the greatest risks.