Federal cyber resilience requires containing the core, not adding more tools

Once an adversary gets inside the network, the problem is no longer prevention; it’s limiting lateral movement and the scope of disruption