Only 34% of the UK organisations surveyed have a mature cyber-breach response programme.