As a security consultant, sure we do. But I'd never use it in a customer report or company blog post if I felt I needed to explain the abbreviation.