The majority give outside partners, contractors and suppliers administrative access — without strong security policies in place.
Source: Threadpost