I am the first one to point out that surveys are trash; the numbers can be skewed to whatever the intended agenda is. With that said, this was a study, not a survey. Conducted over three months with people actually interacting with the "support sites" for the open source software they were studying. I agree Fortify Software has something to gain with the release of this article, but I think they have a very valid point. The cost is going to come in at some point, with open source software it is with the maintenance part of the software development life cycle. It will likely be a hefty cost for a corporation using open source software as they need to adhere to standards, both internal and government regulations. This is just my two cents worth.