Four-fifths of CISOs surveyed are at the lowest two CMM levels when rating their organisations data loss prevention from an overall policy, strategy and solutions perspective.