CIOs and CISOs hold off on crucial updates due to potential impact on business operations