Survey: A cyber-attack is likely, and the U.S. isn't ready