Security planning is tough when you're short-staffed and hackers have smart tech too. You'll need solid skills and, most of all, a willingness to use your imagination.
https://searchsecurity.techtarget.com/opinion/When-cyberthreats-are-nebulous-how-can-you-plan