Only half of businesses are as secure as they should be