Until we can get the basic's right....
We can't go any further.
Finally some actual realistic fines - lets just hope they get enforced.
Wannacrypt hitting 100k pc's shows that systems just aren't patched. And why? After all currently there's no more than a slap on the wrist generally from the ICO for being breached. Once the fines some how match the impact to the people who's data is being released, then we'll see rapid improvements.