Research finds 40% of organizations have experienced a cybersecurity incident, yet 48% didn’t disclose those incidents to the appropriate authorities.
https://www.securitymagazine.com/articles/99938-75-who-didnt-report-cyber-attack-to-leadership-felt-guilty-about-it
