If neither detection systems nor the features available in IT systems and applications for detecting security-relevant events are being used, attackers may penetrate the network of an organisation more easily without this being noticed and access sensitive information without authorisation. Insufficient monitoring of the boundaries between networks is particularly critical.