Human risk is the financial sector's costliest vulnerability
The numbers your security team needs to see
Key Points
- 42% of organizations report an increase in malicious insider threats over the past year. Each insider-driven incident costs an average of $13.1 million.
- 96% of organizations acknowledge incomplete protection, yet only 28% combine both regular security awareness training and continuous monitoring.
- 69% of security leaders say AI-powered attacks are inevitable within 12 months, but only 40% have a strategy in place. Meanwhile, 80% are concerned about sensitive data leaks through generative AI tools.
- 59% of organizations lack confidence in their ability to quickly locate communications data for regulatory requirements, and 91% face challenges ensuring consistent employee compliance.
Every satisfactory risk model in financial services accounts for market volatility, credit exposure, and liquidity pressure, but there's a vulnerability that resists quantification and routinely outpaces them all. It doesn't originate in code, infrastructure, or third-party vendors. It starts with the people who have trusted access to your most sensitive systems and data. From careless clicks to deliberate exfiltration, from regulatory blind spots to the unchecked adoption of emerging AI tools, the human element is quietly compounding into the financial sector's most expensive and least addressed threat surface. The stats above tell a story that should unsettle every CISO, compliance officer, and board member in the industry.
Get a downloadable version of these stats to share with your organizaiton in Mimecast's latest infographic.