Cybersecurity is always last on the budget list. It is not easy to make money working in cybersecurity.

The only upside here is that criminals will (through legislation) eventually force companies to invest more.