The Wall Street Journal studied how successful organizations build resilient cybersecurity programs and identified six major pitfalls. The major mistakes companies make in their cybersecurity were focusing on the technology and not employees, relying on training instead of changing workplace culture so everyone takes ownership of cybersecurity, company leaders not taking a direct role in security, failing to see security threats in everyday work, focusing on preventing cyberattacks and not how to respond, and not seeing cybersecurity as a competitive advantage in the market.