For smaller organizations, cyber incidents are rarely the result of inaction. More often, they reflect a lack of clear ...