Do enterprises need to revamp their cyber security strategy?