When asked about the capabilities they are most focused on strengthening, two‑thirds of firms point to vulnerability management, including vendor oversight. Governance and oversight, penetration and end‑to‑end testing, and technology enablement are also prominent. Data restoration, measurement and monitoring, and talent and upskilling round out the picture.
