Some organizations are still (April 2011) using IE 6 as standard (and mandatory) browser. Reason is typically that they have some applications that use one of the technologies (such as ActiveX) that can run only in IE6.
I consider their IT managers "very brave". It is a ticking bomb with many holes that can expose whole infrastructure of an organization.
How to resolve this issue? Some organizations are trying to identify legacy applications, convert them they planning to move to IE 8 (although IE 9 is out already).
Alternative solution is to install another browser like FireFox or Google Chrome in parallel and have people working in it most of the time and use IE (6) only when it is necessary.
