Does your company run any kind of risk assessment?

So much money is spent on protection protection protection, but very little on detection. Is detecting and identifying major threats apart of your approach? Or is your cyber program simply just "reactive".

[View Poll](https://www.reddit.com/poll/ys3cni)

assessment cybersecurity risk risk assessment