While large global enterprises certainly have a much wider and deeper environment to protect, the threats are very similar, and therefore, the protections required are also similar. The surveyed companies simply do not have the budgets and bandwidth to protect themselves adequately. They know it, and the cybercriminals know it.