Money seen as biggest obstacle to effective IT security