Companies have improved their recovery processes and user controls but still lag in risk preparedness, according to the report.