The majority of companies invests 10% or less of their IT budget in that area, according to new research