A new study has revealed a stark disconnect between how ready businesses in Asia think they are and how well they actually performed during a cyberattack.