"It depends on industry to industry and management focus specifically if there is regulatory requirement.The organizations become little concerned only when there is some security incident takes place in organization. Small organizations and faster…"