From Target and Equifax to Colonial Pipeline and Change Healthcare, the biggest breaches share the same root causes: unpatched software, missing MFA, weak vendor oversight, and untested backups. Here's how to build a security plan that closes those gaps.