90% of respondents agree that AI agents should operate under least privilege principles, with bounded access and tighter controls.

Among C-suite respondents, 54% believe their organization is completely effective at continuously enforcing least privilege, while 61% of the practitioners doing the work disagree.

56% of organizations report that they can’t effectively enforce continuous least privilege for service accounts across cloud, SaaS, and on-premises environments.

Just 27% of organisations enforce a least privilege access model.