It also might be hard to retain, because people involved in cybersecurity are not giving proper authority, respect or other organisational resources to do their job.