Gartner VP of midsize enterprise security Paul Furtado says companies aren't doing fundamentals well. 56 percent of attacks exploit known vulnerabilities where patches have been available for more than 90 days, he says. Data protection should be using immutable backup technology and protecting all critical data, he adds.