Many third parties are now processing more sensitive information on behalf of other organisations than ever before. You can no longer just rely on your own internal cyber security controls to secure information. Although many businesses have effectively enacted internal cybersecurity protections, The Marsh State of Cyber Resilience Report 2022,
https://ico.org.uk/about-the-ico/resear ... n-attacks/