Most enterprise security programs have an uncomfortable truth sitting on their risk registers. They test a small fraction of their attack surface, and they know it. Recent research from Omdia puts the ...