1. The ability move and make decisions faster than the adversary is key.

2. In short, do what you can to prevent the adversary from seeing the same infrastructure twice.

3. But for now health care organizations must operate assuming the adversary is inside now, or will be tomorrow.