More than a quarter of investment management firms in the US do not carry out regular assessments of their cyber security defences, according to the country's top financial regulator.

The worrying statistic has been published by the Securities and Exchange Commission less than a week after a ransomware attack known as WannaCry hit Microsoft systems at organisations around the world.