Without going into specifics, which obviously I cannot, there are dedicated real-time teams devoted to maintaining security.
I am hard to impress.
I was impressed.
I work in the financial industry, so you could probably imagine the security protocols we try to follow. We have 2 teams: Security Reaction Team (SRT) for immediate or ongoing threats and the Security Warning And Triage (SWAT) team for impending or lapsed threats. I'm a technical member of the SRT but feel the effort is just a fancy way to place blame on others when our IT Security team fails at their job.