CAT is a fundamental cyber hygiene requirement.
Its is one of the best bang for buck tools you can implement to secure your business and reduce the risk of an incident taking place.
Mark my words Cyber Risk policies will make this a fundamental requirement if insurance policies in the future as it's a key control in most Security Frameworks Insurers will start asking for evidence of compliance in the future.