That's what the ISC say.
... The threat the UK is facing from cyber attacks is disturbing in its scale and complexity: we have been told this year that the threat is at its highest level ever. The theft of intellectual property, personal details, and classified information causes significant harm, both financial and non-financial. It is incumbent on everyone – individuals, companies and the Government – to take responsibility for their own cyber security. We support the Government‟s efforts to raise awareness and, more importantly, to strengthen our nation's defences ...
Meanwhile, parliament is putting its data in the cloud – so is the Government Digital Service (GDS), HMRC, the MOD and the Home Office – the Cabinet Office is compiling an on-line electoral roll, GDS has appointed eight "identity providers" to make public services digital by default and the Department for Business Innovation and Skills wants us to store all our personal data on the web, in personal data stores.
That makes it hard, to say the least, for "everyone ... to take responsibility for their own cyber security".
Is anyone listening to the ISC?