Each year, Kaspersky Labs Security Services department carries out dozens of cybersecurity assessment projects for companies worldwide. The overall level of protection against external attackers was assessed as low or extremely low for 43% of all analyzed companies. The level of. protection against internal attackers was identified as low. or extremely. low for 93% of companies, according to the statistics. The results and statistics on detected vulnerabilities are provided separately for each type of service provided: external. penetration testing, internal penetration testing and web application security assessment.”]
Source: https://securelist.com/security-assessment-of-corporate-information-systems-in-2017/87370/