Hard to do because cyberattacks keep evolving in sophistication and frequency. Hard to plan for the next attack when its zero-day.