Advanced persistent threats are a waiting game, so play your cards right!