## 4 Results
### Cybersecurity Priorities for the Next Normal  
To answer the third research question (RQ3), we used the Two-Tailed T-test method to determine the cybersecurity priorities. In Table 8, the average score of each dimension was compared with the average score of all the dimensions combined. The dimensions that received high significance scores represent the areas that most organizations have performed well in, which are Secure System Installation and Respond and Recovery. The dimensions with low significance scores are the weak areas that are susceptible to cyber \begin{table}
\begin{tabular}{l c c c c c c} \hline \hline  & **Coefficients** & **Std Err** & **LCL** & **UCL** & **T Stat** & \(p\)**-Value** \\ \hline Intercept & 13.432 & 8.916 & \(-\)5.228 & 32.093 & 1.507 & 0.148 \\ \hline OP & 7.990 & 3.411 & 0.851 & 15.129 & 2.343 & 0.030 \\ \hline OS & 1.656 & 2.575 & \(-\)3.733 & 7.045 & 0.643 & 0.528 \\ \hline AT & 3.041 & 2.565 & \(-\)2.327 & 8.410 & 1.186 & 0.250 \\ \hline PE & 3.085 & 2.481 & \(-\)2.107 & 8.277 & 1.244 & 0.229 \\ \hline RP & 2.695 & 2.648 & \(-\)2.848 & 8.238 & 1.018 & 0.322 \\ \hline \hline \end{tabular} Note: LCL—Lower limit of the 95% confidence interval, UCL—Upper limit of the 95% confidence interval.  
\end{table} 
Table 7: Multiple Linear Regression. risks, thus requiring prioritized actions. These dimensions are Data Security and Cloud Security. The relatively weak performance in the Data Security dimension emphasizes the necessity for raising the bar in protecting personal data to ensure compliance with global and local regulations, such as the EU GDPR and Thailand Personal Data Protection Act (PDPA), as well as protecting the security of data at rest and in transit [16; 30]. Organizations should also consider strengthening their controls to protect the remote workforce and cloud applications, especially when they embrace cloud-first and work-from-anywhere strategies [87]. Based on the dimension correlation data in Table 9, it is recommended that the implementation of strong access control will help to improve data security and application security since there are high intercorrelations between these dimensions. This finding reflects the current technology and compliance trend wherein most businesses are striving to develop applications to serve customers [90]. These applications require strict access control to ensure only authorized users can access the system and data [91]. To further understand the priorities and importance of each dimension, we applied the K-Mean Clustering technique [92] to classify the dimensions into three clusters, as illustrated in Table 10. \begin{table}
\begin{tabular}{l c c c c} \hline \hline
**Dimension** & **Mean** & **SD** & **t-Score** & \(p\) **(2-Tailed)** \\ \hline Governance & 57.371 & 6.676 & \(-0.544\) & 0.590 \\ \hline Asset Management & 55.200 & 4.889 & \(-1.186\) & 0.244 \\ \hline Risk Management & 73.086 & 6.951 & 1.739 & 0.091 \\ \hline End User Management & 57.000 & 5.592 & \(-0.715\) & 0.479 \\ \hline Access Control & 64.000 & 5.821 & 0.515 & 0.610 \\ \hline Data Security & 45.029 & 6.130 & \(-2.605\) & 0.014 ** \\ \hline Network Security & 69.429 & 5.929 & 1.421 & 0.164 \\ \hline Secure System Installation & 77.857 & 4.681 & 3.601 & 0.001 * \\ \hline Application Security & 62.171 & 6.245 & 0.188 & 0.852 \\ \hline Cloud Security & 38.429 & 7.342 & \(-3.074\) & 0.004 ** \\ \hline Operation Security & 63.914 & 6.085 & 0.479 & 0.635 \\ \hline Respond and Recovery & 71.914 & 5.088 & 2.145 & 0.039 * \\ \hline \hline \end{tabular} Note: * high significance (_p_ < 0.05), ** low significance (_p_ < 0.05).  
\end{table} 
Table 8: Two-Tailed T-test for each CTI dimension.