Quarter of fortune 500s external it assets are a cyber riskx