Mimecast Survey Finds Major Gaps in Organizations’ Human-Risk Defenses
Summary
Mimecast’s survey of 2,500 security and IT decision-makers across nine countries reports gaps in human-risk defenses, including limited use of training and continuous monitoring, and concerns about insider risk and AI-driven attacks.
Key points
- The survey says only 28% of organizations combine regular security-awareness training with continuous monitoring for policy violations.
- Respondents estimate an insider-driven data exposure, loss, leak, or theft would cost an average of $13.1 million; the report estimates six such incidents per month on average.
- The report identifies risks across email, collaboration platforms, and internal communications; 38% of respondents say their organizations rely solely on native collaboration-tool security controls.
- While 65% say security-tool integration is too complicated, organizations that integrate tools report faster threat remediation and better visibility.
- The report says 69% view AI-driven attacks against their organization within 12 months as inevitable, while 40% report being fully prepared for those threats.
- Recommendations include securing email and collaboration channels together, automating compliance, integrating security tools, and preparing for AI-driven threats.
Article Details
- Publisher
- Mimecast
- Report Period
- 2026
- Scope
- Survey of IT security and IT decision makers on human risk across nine countries.
- Sample Size
- 2,500 IT security and IT decision makers.
- Key Statistics
- Respondents estimate a single insider-driven data exposure, loss, leak, or theft event would cost an average of $13.1 million.
- Organizations report an average of six insider-driven incidents per month; the report estimates monthly exposure of $78.6 million and annual exposure of approximately $943.2 million.
- 91% of organizations face obstacles ensuring employee compliance, and 96% acknowledge incomplete protection.
- Only 28% of organizations combine regular security awareness training with continuous monitoring for policy violations.
- The survey covers respondents across nine countries; the report names eight: the US, Singapore, the UK, Germany, France, Spain, South Africa, and Australia.
- Recommendations
- Unify protection for email and collaboration channels.
- Identify and score risky users through behavioral analytics.
- Automate compliance enforcement and establish consistent data-retention policies.
- Consolidate and integrate security tools.
- Deploy AI-powered detection and create AI usage policies.
Products
Microsoft TeamsModern organizations face threats across email, Slack, Microsoft Teams, Zoom, and dozens of other collaboration platforms.SlackModern organizations face threats across email, Slack, Microsoft Teams, Zoom, and dozens of other collaboration platforms.ZoomModern organizations face threats across email, Slack, Microsoft Teams, Zoom, and dozens of other collaboration platforms.
Countries
Australia- **Emerging Leaders (Spain, South Africa, Australia)**: Growing awareness, selective adoption, and resource-focused.France- **Cautious Pragmatists (UK, Germany, France)**: High awareness, measured adoption, and compliance focus.Germany- **Cautious Pragmatists (UK, Germany, France)**: High awareness, measured adoption, and compliance focus.Singapore- **AI Adopters (US, Singapore)**: High awareness, high adoption, and seeing ROI.South Africa- **Emerging Leaders (Spain, South Africa, Australia)**: Growing awareness, selective adoption, and resource-focused.Spain- **Emerging Leaders (Spain, South Africa, Australia)**: Growing awareness, selective adoption, and resource-focused.United Kingdom- **Cautious Pragmatists (UK, Germany, France)**: High awareness, measured adoption, and compliance focus.United States- **AI Adopters (US, Singapore)**: High awareness, high adoption, and seeing ROI.