One issue that I believe all industries face is the mentality that it can't happen here. Even when they see others in their line of business being hit. In all too many organizations, security is looked at like insurance and is typically a direct overhead, and usually one of the first budget items to be cut. Unfortunate but true.
This fact is proven when we see some of the latest breaches where budgets are about 5 to 10 percent of what they should be.
I do think when done right cybersecurity does work and pays off.
Just my thoughts
d
