2025 Insider Risk Report Finds Most Organizations Struggle to Detect and Predict Insider Risks

According to CyberNewsWire, the 2025 Insider Risk Report, produced by Cybersecurity Insiders in collaboration with Cogility, finds that 93% of security leaders say insider threats are as difficult or harder to detect than external cyberattacks, while only 23% express strong confidence in stopping them before serious damage occurs.

The report, based on a survey of 635 CISOs and cybersecurity professionals, warns that most organisations remain reactive despite a surge in AI-driven risks and the growing prevalence of decentralised workforces. Key findings include that 93% find insider attacks hard to detect, and fewer than one in four are confident in preventing major damage. It notes that only 21% extensively integrate HR, financial stress, or psycho-social signals into detection, leaving many programmes relying on technical anomalies. The study also reveals that only 12% have mature predictive risk models, with AI-enabled insider risks accelerating.