Kenna Security has released a report into the factors that impact how companies handle patch vulnerabilities.