From a telephone interview I did about a week ago, following the NHS IT problems, for Museums Journal:
“Cyber security is something we think about frequently, but in the last few weeks it’s risen to the top of everyone’s agenda,” he said. We would be crippled if our collections database was unavailable to us for more than a couple of days.” Keeping secure backups in several different UK locations is a crucial part of the service’s security approach, Mensah added. And because hackers often take advantage of human error, other key measures include making sure strong, frequently changed passwords are used, and limiting access to key systems.
Link to the full article. I was trying to make it clear that weak passwords and our human nature to do the easiest thing is often the biggest challenge.