Why is cybersecurity still so bad despite increased investments across security budgets and new solutions/startups?

Breach detection gap is never in real time

Cyber security needs greater collaboration if one wants to implement it with desired outcome. Its just not top or bottom of the org pyramid game, every one from the pyramid needs to be involved and included.  

I think it is actually far better than many think, but in many verticals the focus is on a single tool or person or minimal investment.  As mentioned above, there needs to be a cultural awareness and concern about security and appropriate investment needs to be made in people, process, and multiple layers of protection if a company wants to be secure.  There is no silver bullet, contrary to what that slick sales person on the phone claims, it is an investment of time, money, and attention.

Money can’t fix culture and implementation

Bc unless your a federal agency you don’t have to meet the same laws, polices and compliance regulations. It’s a huge problem even for state, local and tribal governments Bc they don’t have anything to push them to make changes.