New study reveals that organizations appear to struggle in their ability to assess and remediate data encryption risks and policy violations.