The majority of respondents reported investing in cybersecurity over the past year, with new software and systems, employee training and risk planning cited as the top three areas of investment. When it comes to barriers to improving cyber resilience, respondents reported the associated costs, as well as a lack of time, resources and expertise, as the most significant challenges.