Enterprises lack capability against persistent cyber attacks