UK companies spend 9% of IT budget on cybersecurity