The top cybersecurity mistakes companies are making (and how to avoid them)