How prepared are organisations for the ever-escalating cyber threat?