13% of businesses continuously monitor third-party vendor security risks