Re: Failing to do so.
Ask my trust in an FOI how much they spend on cyber security and the figure will be around 1 million.
In reality it's me and half my time is devoted to other things thanks to IT staff leaving and not being replaced.
Cyber security is no doubt on the priority list but that doesn't mean it gets backing from management (essential!) or funds (vital!)