Security audits ‘not enough’ as losses reach $1.5B in 2023, security professional says