37.86% of IT decision-makers at financial services firms reported that attack surface management / continuous monitoring is currently fully or partially managed by an MSP or MSSP.

Slightly more than a third (34%) of companies have implemented continuous monitoring for AI, highlighting a gap in managing AI-related risks and compliance failures.

45% of organisations who only check for compromised passwords during expiry or reset events average only two checks for compromised passwords per year.

Only 50% of organisations scan for compromised passwords more than once a month.