The report found that the threat that organisations were most concerned about are ransomware, phishing/social engineering, and denial of service