Only 8 percent of cybersecurity heads at U.S. financial firms report directly to the CEO; a survey done by the Financial Services Information Sharing & Analysis Center showed the lack of access for cyber heads and pointed to other vulnerabilities; one of the biggest areas for improvement of defenses is better employee training as people can click the wrong link and open systems up; most firms, 54 percent, compile quarterly security reports while 18 percent do bi-annual reports and 16 percent do annual reports. Source.