New research from Ernst & Young finds many security teams are still struggling to integrate with the business