We're a US government (US Air Force) organization and we'll be sticking with 2008 R2 for the forseeable future. My specific application runs using SQL 2008 on three different networks, all of different classification levels. In order for us to upgrade anything we have to get Information Assurance and the security officers to approve the new software for all three networks. That's typically a nightmare. Fortunately SQL is US-owned software so the process is much simpler. Getting software developed by foreign-owned companies approved is nearly impossible.