A survey compiled last month at the RSA security conference reveals that most companies are still behind with proper security practices. Some companies even intentionally ignore security flaws for various reasons ranging from lack of time to lack of know-how. Only 47% of organizations patch vulnerabilities as soon as they are known, according to the survey. 71% of respondents said they would be able to hack their own company, while only 9% said this would be “very unlikely”” Only 17% of companies ever hired a penetration tester
Source:

