Organizations must make improvements to their risk management programs in order to keep pace with the latest cyber-attack risks and data security challenges, according to the second annual 2015 Vendor Risk Management Benchmark Study, released by the Shared Assessments Program and Protiviti, a global consulting firm.