Less than half of the businesses in the U.S., U.K. and Germany are prepared to deal with cyber-attacks, a report says.