This lack of sophistication is said to expose organisations to ransomware, phishing, IoT and other threats.

Indeed, 87% of Australian respondents said they feel exposed to phishing attacks, and 78% to ransomware and IoT attacks.

Issues leading to this lack of sophistication are said to include manual approaches to attack surface mapping (20%), and difficulties around working with multiple tech stacks (48%).

Only a minority (35%) said they risk assessments for individual assets, attack attempt frequency, attack attempt trends, impact of a breach on any particular area, industry benchmarks, and preventative action plans for specific vulnerabilities.

But an encouraging sign is that 71% believe their C-suite fully understands cyber risk at present.

"We already knew that organisations are concerned about a fast-expanding digital attack surface with limited visibility," said Trend Micro ANZ vice president Ashley Watkins.

"Now we know that they also need urgent help to discover and manage cyber risk across this environment. In many cases, the challenge is compounded by siloed point solutions. Organisations must search for a single platform that gives them the certainty and security they require."

The research was performed by Sapio Research, which interviewed 6297 IT and business decision makers across 29 countries.

More details of the findings are available here.