In the private sector, security is an after though, especially in application development where the "security standard is a bare minimum of requirements that usually entail implementing simple authorization and authentication schemes, a firewall, and a virus scanner.