There are so many "numbers" reports in the cybersecurity industry without any kind of way for validating the claims that I think all of them have equal value -

There are so many "numbers" reports in the cybersecurity industry without any kind of way for validating the claims that I think all of them have equal value - close to zero. The only source of truth in this industry is speaking with the "frontline" and figuring out how things really are.