Half of UK businesses faced cyber security threats last year but many lack the skills to respond effectively