Because most of the organizations considered discussions of their security programs to be sensitive and they wanted to avoid undue public attention on this aspect of their operations, we agreed not to identify the organizations by name.
In general, security programs were found to be lacking in most organizations.