With Prevention Efforts Failing, IT Security Focus Turns to Reaction by David Weldon via @infomgmt

“Organisations are increasingly focusing on detection and response, because taking a prevention approach has not been successful in blocking malicious attacks,” noted analyst Elizabeth Kim.

I can understand that approach - if you can't beat them one way, try to take another approach and beat them another way.