The public sector is a cyberattack magnet, manual processes are to blame