Tenable Network Security, which issues the annual report card, said the education sector again scored lowest in combating cyber-threats.