Deloitte, Blurring the Lines: 2013 TMT Global Security Study (Jan. 8, 2013) (full-text)
This report states that 88% of companies do not believe that they are vulnerable to an external cyber threat, while more than half of those surveyed have experienced a security incident in the last year. . . . Companies rated mistakes by their employees as a top threat, with 70% highlighting a lack of security awareness as a vulnerability. Despite this, less than half of companies (48%) offer even general security-related training, with 49% saying that a lack of budget was making it hard to improve security.