Only, 12% of the organisations surveyed manage compliance with information security policies with continuous monitoring.