The majority give outside partners, contractors and suppliers administrative access — without strong security policies in place. Read more