Not having enough information about the information domain to be protected carries the risk that essential areas of the information domain will not be not protected sufficiently by detection systems. As a consequence, attackers might easily penetrate the respective organisation's network and access sensitive information. They may also stay in the system for extended periods of time and access the network without this being noticed.