Incidents tend to happen at the seams and cracks of your organization, where the automation is incomplete, observability is not omniscient, and humans are still in the loop. Our blind spots are constantly evolving, and we must update our mental models of how to approach security accordingly.
https://www.securitymagazine.com/articles/96422-how-a-layered-defense-strategy-protects-organizations-from-security-incidents-occurring-at-the-seams