Sweeping survey of IT leaders reveals most small and mid cap companies remain significantly underinvested in data security innovation.