A report finds more money is being spent to prevent data breaches, but adequate manpower to oversee network security is still lacking.