Do state institutions have the resources to fight hackers?