Less than half of the CISOs surveyed said their organisations were well aligned with legal and regulatory requirements.