A data security company's research shows that what IT managers think are the best ways to stop data breaches are actually not the most effective techniques at all.