Control failures are behind a growing number of cybersecurity incidents