This report can be used to identify areas for improvement, prioritise resource allocation and ultimately strengthen the overall cybersecurity resilience of public institutions in South Africa.