53% of organisations rate themselves as only ‘Initial’ or ‘Repeatable’ against industry best practices.