Alarming revelations in organizational cyber security

This exploratory research surveyed organizations about their cyber security posture in the latter three domains (Functions) of the NIST Cybersecurity Framework (CSF). The data showed alarming insights into critical issues facing organizations of all sizes, such as lack of dedicated cyber security personnel, inability to respond to malicious activity, and inability to recover from malicious activity. With nearly every business sector mandating minimum cyber security requirements as of 2025, the issues reported in this study are not only unacceptable, they are also outright dangerous.