Most organizations overestimate their cyber resilience while investing in areas that don't match how they're actually being attacked, new survey data reveals.