“I don’t need a vulnerability scan of our network, everything is patched. We have patch management!” Have you thought those words, even said them aloud?