The disconnect between security and business goals often has negative consequences, as it increases the success of cyberattacks at one in four companies.