This continues to be the experience of many clients of mine, directly or indirectly in the healthcare field. Of course, my advice from over 2 years ago is still applicable: patch, isolate, backup, and train (although today I think I'd change the batting order to backup, patch, train and isolate).