Echelon One/Venafi-sponsored survey, 2011 IT Security Best Practices Assessment, was based on 12 best security practices. Nearly all of the 420 organizations that participated in the survey were at some risk in security or compliance. 77 percent don’t perform quarterly security and compliance training; 64% don’t encrypt all of their cloud data and cloud transactions. 40% of the respondents didn’t know whether their organizations encrypted their data in Google Apps, Salesforce.com, or Dropbox, and 41% didn’t. know how often their SSH keys were rotated.”]
Source: https://www.darkreading.com/compliance/security-best-practices-a-big-fail-in-most-organizations