According to the 2014 US State of Cybercrime Survey, mobile technologies and risks are proliferating but security efforts are not keeping up. Only a third of companies have a mobile security strategy in place. Patch management is one of the most common weak points in companies. Sound policies, practices and education are staples that every organization should keep in check. The six-point security check is based on industry standards such as OVAL (Open Vulnerability and Assessment Language) and SANS Top 20 (SysAdmin)”]
Source: https://informationsecuritybuzz.com/articles/6-point-security-check/