New Report Reveals Just 10% of Employees Drive 73% of Cyber Risk

A new study by Cyentia Institute reveals that just 10% of employees are responsible for 73% of cyber risk behaviors within organizations. The research, based on data from over 100 enterprises and hundreds of millions of user events, shows that traditional security awareness training provides visibility into only 12% of risky behavior. Companies using Human Risk Management (HRM) platforms can reduce their risky user population by 50% and cut high-risk behavior duration by 60%. The findings challenge common assumptions, showing remote workers are actually less risky than in-office employees, and emphasize the need to shift from awareness-based to behavior-focused cybersecurity approaches.