Every year, millions of businesses fall victim to cyberattacks, and a surprising number of them trace back to one simple problem: weak or poorly managed