Most states are financially stressed and have too many competing demands on their budget to accord cyber security any worthwhile priority.