Information security departments continue to struggle with a lack of skilled resources, executive awareness and support. An EY survey finds that the only security area rated a lower priority by more respondents is threat and vulnerability management, this is surprising, as without it organisations have little visibility into where the cyber threats are