We find that too many firms are not aware of all the IT assets on their estate and have not undertaken adequate risk assessments to adequately understand the threats and vulnerabilities to them.
Too many firms do not fully understand all the systems and processes that support their business services and they are not aware of all the third-party relationships that support their value chain.