Companies have a long road ahead to protect privileged identities and access, despite corporate leaders' good intentions