Through a survey conducted in the middle of 2012 it was found that 68 percent of organizations assessed the efficiency and effectiveness of their information security functions through assessments performed by internal audit functions .