91% of companies have experienced at least one IT security event from an external source in the last 12 months