9 working weeks per year are spent on vendor security reviews and risk assessments, compared to 7 weeks the previous year.

Enterprises conducting six or more risk assessments per year report stronger overall risk discipline and telemetry scores.

7% of organisations assess API risk monthly or less.

Only 32% of organisations conduct daily API risk assessments.