Distractions means 36 percent of tech workers only do the bare minimum for security at work