Yes. This is obvious but also counterintuitive. People forget that it's a long game and that malware (such as Stuxnet) is patient and penetrates gradually.