The study highlighted that internal organisational friction - including bureaucratic approval delays, fragmented data, and disconnected teams - represents a greater impediment to strengthening cyber defences than technological limitations.