Third-party risk management

99.5%

Of organizations have at least one vendor in their third-party risk management program with a cyber risk rating of D or F. 

^{Source: Balancing Third-Party Risk: How Good Is the Company You Keep? Research Report. RiskRecon and Cyentia Institute.}

84%

Of organizations host critical and/or sensitive assets with third parties.

^{Source: Ripples Across the Risk Surface. Research Report. RiskRecon and Cyentia Institute.}

35%

Of organizations have externally hosted assets with high or critical issues or findings.

^{Source: Ripples Across the Risk Surface. Research Report. RiskRecon and Cyentia Institute.}