The reality for many agencies is their leaders must make tough decisions in prioritizing where the limited funds should go. In some cases, that can leave cybersecurity capabilities with insufficient funds to meet future goals and objectives.