Head of the Ponemon Institute details the process and the challenges of conducting modern security surveys