Is Willful Ignorance Influencing Your Enterprise Security Decisions?