Need for sustained efforts --- This is one of the main reasons it is hard to get companies and organisations to assess and implement cybersecurity measures - it is not a one-time assessment and the risks keep changing over time, so it needs to be a sustained part of the company's policies with appropriate resources allocated to it but since it is not necessarily part of a company's 'core mandate', it is de-prioritised or dispensed with in times of crisis.

Source author: Pavitra Ramanujam pavitra.ramanujam@gmail.com