Cyber Security comes down to standards and policies both within public and private institutions and the governing bodies explicitly state what must be done from that perspective.
There is mass saturation in the space and all the big players are locked in as the standard blueprint is rolled out everywhere.
