"10% of what? Workforce of what? Maturity of what? A fundamental issue is that since "cybersecurity" has come into vogue as its own creation different than "information security" - as defined by NIST CSF and regulatory bodies (such as NY DFS),…"