61% of security leaders are very concerned about credential compromise being used for insider activity over the next 12 months.

51% of organizations report operating at Maturity Level 2 (Implemented: tools are in place but fragmented across teams with limited integration).

46% say a lack of skilled staff is the biggest barrier to maturing their insider risk program.

42% say organizational silos (e.g., Security vs HR vs Legal) is the biggest barrier to maturing their insider risk program.

31% say maintenance burden is the biggest barrier to maturing their insider risk program.

23% say user pushback or fear of harming culture is the biggest barrier to maturing their insider risk program.

47% of organizations utilize legacy Data Loss Prevention (DLP) tools to monitor insider activity.

Only 47% of security professionals strongly agree that their existing DLP tools are effective in protecting sensitive data from leaving the organization.

52% of security leaders cite Shadow AI/SaaS application control as a priority for next-generation solutions.

The average annual cash compensation for a functional department leader (such as a head of SecOps) at a Fortune 500-size company is 40% higher than the average for the same role at midsize security organizations.

8% of the security staff budget for Fortune 500 organizations with 50+ security FTEs is allocated to Other functions.

9% of the security staff budget for Fortune 500 organizations with 50+ security FTEs is allocated to Network security.

29% of organizations detected between 1 and 5 insider incidents in the past 18 months.

41% of organizations reported financial losses between $1 million and $10 million for their most significant insider incident.

67% of organizations reported a financial impact between $100,000 and $10 million for their most significant incident.

9% of organizations reported losses above $10 million due to their most significant insider incident.

13% of insider incidents involved credit cardholder data.

45% of organizations reported revenue or financial loss as the primary consequence of their most significant insider incident.

20.4% of Managed Service Providers (MSPs) identified handling compliance and regulatory requirements (e.g., policy drift) as a top pain point when managing Microsoft 365.

19.7% of Managed Service Providers (MSPs) identified managing licenses, renewals, and unused subscriptions across tenants as a top pain point when managing Microsoft 365.