How to best protect your data when prevention fails