33.9% of teams at financial organizations use role-based access with limited audit trails for access to high-risk systems requiring elevated privileges.

52% of teams at financial organizations manage 10–20 high-risk systems requiring elevated privileges.

8.9% of financial organizations are investing in identity lifecycle management.

31% of teams at financial organizations revoke access to high-risk systems requiring elevated privileges in hours, while 38% do it instantly.

Only 17% of healthcare organizations list compliance as a top concern.

42% of healthcare companies failed an identity-related compliance audit.

One in four (25%) flagged compliance navigation as their biggest challenge with security solutions.

Nearly a third (29.5%) of iGaming operators found keeping up with new regulations "very challenging".

Slightly more than a third (34%) of companies have implemented continuous monitoring for AI, highlighting a gap in managing AI-related risks and compliance failures.

Only 12% of companies feel "completely prepared" to address the global patchwork of data privacy laws.

When asked about the top challenges when acting on threat intelligence, 38% of CISOs said regulatory constraints.

56.3% of North American (NA) firms have no plans to introduce AI for compliance in the next twelve months.

In 2024, 29.5% of respondents were struggling to get staff to stick to compliance policies. In 2023, 61.5% of respondents were struggling to get staff to stick to compliance policies

50.6% of NA firms agree that banning communications channels, like WhatsApp and WeChat, is an effective compliance solution.

Just 31.7% of EMEA-based firms agree that banning communications channels is an effective compliance solution.

51% of respondents said compliance and regulatory demands are the reason why AI workloads are in a combination of private cloud and on-premises environments.

56.3% of North American (NA) firms have no plans to introduce AI for compliance in the next twelve months.

There has been a near 20% drop in firms electing to ban channels since 2023.

There has been an increase in firms enabling and monitoring channels of over 28% in the last two years.

71.4% of EMEA respondents intend to introduce AI into compliance workflows in the next year.