Even among medium and large organisations, which typically have greater resources, the numbers are patchy. Sixty-two percent of medium-sized firms report being insured against cyber risks, compared with 54 percent of large enterprises. Experts caution that larger firms, while often more confident in their internal defences, may still lack adequate coverage for major losses like those now confronting M&S.
