Ask a CCO: What's your strategy for preventing and detecting