Consciously or unconsciously, companies are still using the Pareto Principle to secure their organisation's IT infrastructure, focusing their efforts and budget on the security gaps affecting 80% of the organisation and leaving the remaining 20% of the organisation vulnerable to attack.