CIOs fear losing cyber fight against sophisticated hackers, lax users