57% of respondents say they are somewhat or very confident in their own applications. 90% say application security is a significant part of their overall information security programs. 81% are only somewhat or not at all confident in applications developed or managed by third-party service providers. This faith erodes even further with large institutions ($2 billion or more in assets under management), where 91% were only somewhat/not at all. The survey, administered electronically in August, drew more than 100 responses from financial institutions of all sizes.”]
Source: https://www.cuinfosecurity.com/handbooks/application-security-survey-results-executive-summary-h-3