Fewer than one-third of US state and local government and higher-education organizations say they are ramping up their cyber resilience.