Enterprises fear disruption to business critical applications, yet don’t prioritize securing them