According to areport recently released by Ponemon Institute, and sponsored by IBM and Arxan, around 80% of Internet of Things (IoT) applications and 71% of mobile applications are not tested for vulnerabilities, raising security concerns. The study, based on a survey among IT and IT security practitioners, also shows that: many organisations are worried about an attack against mobile and IoT apps that are used in the workplace; the use of mobile and IoT apps are threats to a strong security posture; despite the risk, there is a lack urgency to address the threat (only 32% of respondents say their organisation urgently wants to secure mobile apps and 42% of respondents say it is urgent to secure IoT apps); testing of mobile and IoT apps often does not occur until production; broken cryptography and unintended data leakage are the most difficult mobile risks to mitigate.