A report found that S&P 500 organizations have gaps in their cybersecurity leadership (CISOs and/or CIOs) when it comes to risk mitigation.
https://www.securitymagazine.com/articles/99934-s-and-p-500-companies-find-gaps-in-their-cybersecurity-leadership