Browsing: the Way Organizations Assess Security