51 Identity & Access Management Statistics You Need To Know for 2024

48% of organizations see ransomware as their biggest concern for the coming year, with 42% reporting that they suffered a ransomware attack in the past year. (Arctic Wolf)

In another survey, 89% of organizations stated that they were targeted by ransomware in the past year. (CyberArk)

Among 1,700 IT professionals, 97% say they were targeted by phishing emails in the past year. (Mimecast)

Three out of four say they have experienced an increase in email-based threats, with 59% noting that cyberattacks are becoming more sophisticated. (Mimecast)

80% of cyberattacks leverage identity-based techniques. (CrowdStrike)

Phishing (16%) and compromised credentials (15%) are the two most common initial attack vectors for data breaches. (IBM)

In tracking business email compromise over the span of a year, Microsoft observed an average of 156,000 daily attempts. (Microsoft)

Password-based attacks increased as much as ten times compared to the previous year. (Microsoft)

Breaches caused by compromised credentials or insider threats take the longest to resolve, with a mean time to identify and resolve of 328 days and 308 days respectively. (IBM)

In a survey of 2,300 security decision makers, 99% of respondents believe they will face an identity-related compromise in the next year. (CyberArk)

The total number of identities in an organization (humans and machines) is expected to grow by 240% over the next 12 months. (CyberArk)

The total cost of cybercrime has been estimated at 8 trillion dollars for the year 2023. (Cybersecurity Ventures)

The median ransom demand following a ransomware attack was $500,000. (Arctic Wolf)

The average total cost of a data breach among 553 surveyed organizations was 4.45 million dollars. (IBM)

Identity and access management reduces the total cost of a data breach by $180,000 on average. (IBM)

57% of IT directors say they are expecting their cybersecurity budget to increase. (Arctic Wolf)

79% of those with cyber insurance reported premiums going up in the past year, most commonly in the range of 50 to 100 percent. (Delinea)

Relatedly, identity and access management was named most frequently as a required control to qualify for cyber insurance policies. (Delinea)

63% of IT decision makers admitted that high-sensivity access in their organization is not adequately secured. (CyberArk)

74 percent are concerned about the loss of confidential information through employees, ex-employees or third-party vendors. (CyberArk)

In the same survey, 58% reported instances of exiting users attempting to hold on to confidential work documents. (CyberArk)

Over 70 percent of companies admit to instances of employees receiving inappropriate access to sensitive data or retaining access after leaving the organization. (SailPoint)

51% reported instances of non-employees retaining access to business data after a project was completed. (SailPoint)

In our own survey, only 6% of participants were confident that no one has access to data they do not need in their organization. (tenfold)

Eight out of ten IT professionals believe their organization is at risk of inadvertent data leaks due to negligent employees. (Mimecast)

62% of security teams name limited visibility across their IT environment as a challenge impacting their work. (CyberArk)

42% of organizations plan to implement identity governance measures, making it the most frequent response. (Netwrix)

87% of organizations are working towards zero trust access or have already put it in place, based on a survey of 398 IT and cybersecurity professionals. (Fortra)

However, 42% of security teams are not or only somewhat confident in their ability to achieve zero trust security. (Fortra)

80% say that better identity management solutions/practices would have prevented some or all of the attacks on their organization. (One Identity)

While identity management helps protect sensitive data, 3 out of 4 IT decision makers named improving efficiency in the IT department as the driving factor for implementing IAM software. (tenfold)

However, governance solutions come with their own challenges. Lack of specialized staff (37%), lengthy setups (32%), difficult maintenance (31%), the inability to integrate systems (29%) and the need for extensive programming knowledge (29%) are the most common stumbling blocks for IAM projects. (tenfold)

73% of organizations use a hybrid environment, only 19% are exclusively using on-premise systems based on a survey of 1,610 IT professionals. (Netwrix)

98% of monitored cloud-tenants were targeted by a brute-force or precision attack in the past year. (Proofpoint)

53% of IT Directors plan to upgrade their cloud security in 2024, making it the leading security investment among respondents. (Arctic Wolf)

Only 38% of organizations believe they are effectively securing their cloud resources, with 26% seeing this as one of their biggest weaknesses. (Arctic Wolf)

Speaking of cloud security, of the 701 IT directors surveyed for this report, 45% see data confidentiality as the biggest issue and their primary objective for the upcoming calendar year. (Arctic Wolf)

Cloud security (53%) and security automation (36%) were the top priorities named by 1,520 IT security leaders. (Splunk)

In a survey of 1,700 CISOs and IT professionals, 94% say they need stronger protections than those that come with Microsoft 365 and Google Workspace apps. (Mimecast)

3 out of 4 say that collaboration tools pose significant new security risks, with 72% predicting to be harmed by a collaboration-tool-based attack in the future. (Mimecast)

Office 365 emails were the most frequently imitated message type in phishing attempts in the past year. (Proofpoint)

The demand for cybersecurity experts has increased by 35% compared to the previous year. (Microsoft)

68% of organizations named staffing as the primary issue holding back their security efforts. 56% said they would need five or more additional full-time members for their IT staff. (Arctic Wolf)

In a survey of 2,178 information security managers, 59 percent of organizations reported being somewhat to significantly understaffed. (ISACA)

49% named identity and access management as one of the top five security skills needed in their organization, the highest share among available responses. (ISACA)

The global cybersecurity workforce gap is estimated at roughly 4 million people. (ISC2)

67% of respondents said their cybersecurity staff is not big enough to prevent and resolve security issues. (ISC2)

Cloud computing security (35%) and zero trust implementation (29%) were among the most common areas in which companies face skill gaps. (ISC2)

The biggest issues negatively affecting cybersecurity professionals job satisfaction are overwork (30%) and too many emails/tasks (31%). (ISC2)

60% of businesses say they had difficulties retaining qualified cybersecurity staff. (Sosafe)

Similarly, 68% of businesses expect layoffs and staff turnover to create new security issues. (CyberArk)