There is no question that cyber threats exist and that for many it is not a question of if but when. One issue is that a key focus seems to be on compliance or finding the tangible product or magic bullet that will check off the boxes of what is required for protecting your assets.
Although many individuals do purchase programs to avoid cyber threats, according to an electric industry paper, 2014 Strategic Decisions, only 32% of these individuals have used systems with proper monitoring segmentation and redundancies.
The key is not to avoid responsibility and to realize that buying a package monetary by-staff at a remote location is no substitute for integrating a program with your on-site personnel in a systematic complex thoughtful plan that protects the unique assets being held.