Cyberattack planning is still depressingly poor, even in big businesses

Most companies have a strategy, but fewer have the funds or detailed plans to back it up.