The same maxim applies to cyber security as physical security. Defenders must be right 100% of the time, an attacker only has to be right once. That will never change--even if you deem your systems "impregnable" (if you do, ask the French how the Maginot line worked out for them).