A new report shows that 13% of organizations continuously monitor the security risks of their third parties.