How aware are you of security?

Hello everyone,

as an IT-Professional I sometimes wonder if webmaster have the slightest amount of knowledge when it comes down to security? Because nearly every website I visit has critical security threads and is an open invite for black hats.

So my questions are
how aware are you of security?
What steps do you take to ensure the security of your website?
And last but not least: how often do you let a penetration tester check your website?

Thanks for your responses and best regards

Poster :