Managing complexity still top security challenge, survey says