Breaches aren’t completely avoidable, even with good security measures in place. A zero-day vulnerability are easy to find, for example. You’ll never get ahead of the hackers. But there are a lot of simple controls that aren’t implemented that cause breaches, though, so there are things a company can do to lessen the chance of a breach.
Your company also needs a breach response plan, in order to respond quickly and correctly to a breach event.