Survey spotlights data-handling policies as breaches make news, finds lower average crime costs