The rapid adoption of AI, cloud platforms, and decentralized work has fundamentally changed how data moves through organizations. Yet many companies continue to rely on security strategies built for a much simpler era. The Insider Risk Report from Fortinet and Cybersecurity Insiders reveals a growing disconnect between modern business operations and the tools organizations use to protect sensitive information. Here’s what their findings uncovered.
Insider Risk is a Business Problem
For years, cybersecurity programs have focused primarily on external threats. Meanwhile, insider-driven incidents have become both more common and more costly. According to the report, 77% of organizations experienced at least one insider-related data loss incident during the past 18 months, and 41% reported financial losses between $1 million and $10 million from their most significant event.
These numbers illustrate an important shift in thinking. Insider risk is no longer a technical challenge confined to the security operations center. It is a business risk with direct implications for revenue, compliance, operational continuity, and customer trust.
Organizations that continue to treat insider threats as a secondary concern may be underestimating the scale of the exposure they face.
The Visibility Gap Is Growing
A recurring theme is the lack of visibility into how users interact with sensitive information. This visibility gap creates a dangerous situation. Traditional security tools may identify a policy violation after it occurs, but they often fail to answer the questions that matter most:
- Who was involved?
- Why did the activity occur?
- Was the action legitimate or potentially risky?
Without contextual understanding, security teams are often left reacting after damage has already been done.
AI is Expanding the Insider Risk Surface
Generative AI has introduced an entirely new dimension to insider risk. Employees can now paste customer information, proprietary code, business strategies, or confidential documents into AI platforms in seconds. The convenience is undeniable, but so is the risk.
The report found that more than half of security leaders are highly concerned about sensitive information being shared with tools such as ChatGPT and other AI platforms. Yet only 12% believe they are fully prepared to detect or respond to these types of incidents.
This preparedness gap highlights one of the defining security leadership challenges of the AI era: enabling innovation while maintaining governance and control.
Security Leaders Shift to Behavior-Based Protection
The report points to an emerging evolution in insider risk management. Organizations are moving beyond isolated security tools toward integrated platforms that combine visibility, behavioral analytics, context awareness, and automated response capabilities.
This shift reflects a broader realization that insider risk is fundamentally a human challenge rather than a technology challenge. Security leaders increasingly want solutions that can identify unusual behavior, detect evolving risk patterns, and provide actionable insights before a policy violation or data loss event occurs.
Real-time behavioral analytics emerged as the most important capability respondents want from next-generation insider risk solutions.
The Future of Insider Risk Management
The findings of the Insider Risk Report make one thing clear: organizations cannot solve modern insider risk challenges using yesterday's security strategies. The combination of cloud adoption, hybrid work, SaaS applications, and AI-powered productivity tools has fundamentally changed how sensitive information is created, accessed, and shared.
Forward-thinking organizations are recognizing that successful insider risk programs require more than enforcement. They require visibility, behavioral understanding, cross-functional governance, and the ability to identify risk before it becomes a costly incident.
In the age of AI, the organizations that thrive will not necessarily be those that collect the most data, but those that can see, understand, and act on the signals hidden within it.
Download the complete Insider Risk Report prepared by Fortinet and Cybersecurity Insiders to explore the latest research, benchmark your organization's maturity, and discover the strategies security leaders are adopting to reduce risk in an increasingly AI-driven world.
Access a PDF of the Insider Risk Report here.