This should come as no surprise, but businesses still do not understand the cyber threat and are unwilling to invest in security their IT assets:

Cybersecurity requires agile improvement and dedicated resources. Unfortunately, instead of businesses taking the recommended holistic approach, cybersecurity is often critically overlooked. An infographic based on a study from security solutions provider Resilient Systems and market research firm Ponemon breaks down key areas of continued failure for businesses.

66 percent of the security and IT professionals surveyed said their organizations are unprepared to recover from a cyber attack, and 75 percent lack a formal incident response plan, which has not changed since last year.

More or less mirrors my experience.