Based on some independent research that my company commissioned with more than 200 companies, we came to several conclusions that are highlighted in the article. Broadly, however, it signals the false sense of (cyber)security that many companies are currently harboring.