Still, according to the Ponemon Institute, just 38 percent of companies surveyed have a security strategy in place to protect their IT infrastructure.