The document summarizes the results of a 2016 cyber security study of over 650 IT and security practitioners in Canada. It found that only 37% believe they are winning the cyber security war, organizations experience 40 cyber attacks per year on average, and the average cost of a cyber security compromise was $7 million in the last 12 months. It identified high performing organizations that have achieved a more effective cyber security posture. High performing organizations are more likely to believe they are winning the cyber security war, less likely to experience data loss or exposure incidents, invest heavily in monitoring tools, and have cyber security strategies more aligned with business goals.