According to a 2016 survey of more than 1,000 C-suite mid-market executives by the National Center for the Middle Market, more than half of U.S. middle market companies did not have an “up-to-date” strategy to address cybersecurity risks, while 30 percent had no action plan at all.