The majority of local organisations are still using dated software to deal with cyber security incidents, a new survey finds.