Businesses in Europe are adopting a "lackluster approach" to security of data and systems, according to a new study.