IT managers are flying blind in the battle to protect their companies from cyber attacks, according to a new Sophos survey.