It is a common situation.  Organizations become aware of cybersecurity from peers, the news, legal requirements and/or auditors.  The...