Widespread failure to implement or enforce internet acceptable usage policies (AUPs) is leaving many U.K. companies open to potentially serious IT security breaches, newly published research has claimed.