Business owners are more concerned about cyber attacks than ever before, however cyber security investment remains lacking.