Identity and IoT monitoring gaps leave managed service providers with little public scrutiny, despite rising threats to clients' systems.