Majority of organisations worried about security, but not everyone's doing something about it.