A new survey by BAE Systems sheds light on the incident response capabilities and readiness of small and large organizations. The research found that 71% of cybersecurity breaches involve phishing, which indicates how human error is putting organizations at risk. Two out of three organizations (67%) are dealing with 1 to 25 security incidents each month, while in in four (26%) organizations respond to between 25 and 99 incidents.

However, many organizations are not ready to properly respond to all the threats they face, with 22% of organizations lacking a definite incident response solution and instead relying either on temporary resources or not conducting incident response at all, while 23% of organizations never test their incident response preparedness together with top executives. According to Mike Hepple of BAE Systems, the findings show that “far too many companies are ignoring a large piece of their cybersecurity defense.”

Read more: Organizations still ignoring a large piece of their cybersecurity defense