Keeping a company protected from hacking and data theft needs to be a continuous process, rather than a set of stopgap solutions.