A study by Forrester indicates that companies are not doing enough to secure open source, outsourced code and commercial applications.

According to ComputerWeekly, while more than half of respondents said they regularly use outsourcing for business-critical applications, only a third do rigorous security testing. What's more, 57 percent said they do not have training programs for developers on how to code securely.

Money seems to play a role in application security. The study shows that 64 percent of companies struggle to find a cost-effective way to assess code to find and identify security vulnerabilities.