Bottom line: Despite state cybersecurity laws, inadequate processes and corporate culture remain the primary causes of data breaches. Government analyses show that organizations lack sufficient visibility into their security systems and a cultural transformation is necessary.
Government representatives revealed that despite state laws to improve cybersecurity, problems persist and visibility of vulnerabilities remains inadequate.
An analysis of security incidents shows that deficient processes and insufficient security culture in organizations lead to the primary causes of data breaches. Although various states have enacted laws to improve cyber hygiene and increase digital resilience, fundamental problems persist. The investigation further reveals that organizations often lack visibility into their own security systems, making it difficult to detect and respond to threats in a timely manner. Government experts emphasize that technical solutions alone are not sufficient – cultural change and improved management processes are needed to achieve real progress in protecting sensitive data.