The 2023 Verizon Data Breach Investigations Report (DBIR) shows that more than 60% of mid-sized organizations admit their incident response plans have never been validated through real-world drills.