Security measures should not only focus on preventing cyber-attacks but also on detection, remediation, and efficient investigation. Lessons from stopping piracy can be applied in the cybersecurity industry.