We know we'll never have 100% foolproof security, but we can keep the risk at acceptably low levels.
We control all access points to the network. That means secure authentication to dial in to the network and firewalls around all the Internet servers.
It's been a hard lesson learned. We are now especially emphasizing the importance of not sharing passwords.
In NT, no one needs to know a user's password except the individual user.