Assume the next surprise attack is only a matter of time, and use that time to make it harder to carry out and less catastrophic when it comes.