15% Global firms face cyber threats from low security investment