Study shows strong levels of reporting on governance and risk management amongst adopters, but fewer disclosing metrics and targets
