While many organizations have increased investments in cybersecurity, common myths exist. Cyber criminals remain the top threat despite advances in security tools. Additionally, while Chief Information Security Officers are increasingly common, effective monitoring and response capabilities as well as mature cyber defense programs remain elusive for most organizations. Proper management of supply chain risks and the ability to withstand data breaches through insurance also remain challenges. Overall, reality has yet to catch up to the level of security assumed in many prevailing myths.