Our organizations relied upon a perimeter-focused security strategy. This security model assumes that all of the threats originate outside of the organization and that everyone with access to the internal network is trusted.