Many companies are worried about potential cyberattacks. But despite this, investment in IT security remains meager, says Tobias Glemser.