Why do businesses make cyber security a priority only when they have been attacked? Statistics confirm that the threat of unauthorised