Almost half of companies do not have a proper security polic