Scott Stransky, managing director and head of the Cyber Risk Analytics Center at Marsh McLennan, said organizations without active directory hardening are more than five times more likely to have a cyber issue.