Is complacency driving the cyber agenda?