Reputational damage, financial consequences and compliance failure are U.K. companies' main security worries, study says.