A new report reveals that businesses are struggling with cyber security and that it takes an average of 11 person-hours to resolve a single incident.