New study reveals gaps in common types of cybersecurity training