Microsoft stops providing XP security patches in April 2014. Any organization that wants to use XP after that will need to pay Microsoft to maintain support. Any organization that continues to use XP without support is irresponsible.