65% of organizations do not have a formal CEO security program, indicating a view of executive protection as discretionary rather than fundamental.