The KYE & Workforce Identity Crisis Report

96% of organizations consider insider risk a significant threat

46% of IT and security leaders cite phishing and social engineering as a workforce identity threat

43% of IT and security leaders cite compromised credentials as a workforce identity threat

32% of IT and security leaders cite malicious insider activity as a workforce identity threat

59% of IT and security leaders say KYE programs are now a core part of their identity strategy

46% of IT and security leaders are very confident they can reliably verify identity during everyday access to systems and data

42% of IT and security leaders are very confident they can reliably verify identity during first login and device enrollment

28% of fully remote organizations measure and regularly report AI-driven impersonation attacks

40% of hybrid organizations measure and regularly report AI-driven impersonation attacks

39% of in-office organizations measure and regularly report AI-driven impersonation attacks

45% of IT and security leaders say the CISO or security team has primary responsibility for workforce identity security

28% of IT and security leaders report they have experienced or investigated candidate fraud in the past 12-24 months

30% of IT and security leaders are concerned about identity fraud involving fraudulent new hires

45% of organizations rely on usernames and passwords as their primary authentication method

34% of IT and security leaders cite privileged access misuse as a workforce identity threat

33% of IT and security leaders cite employee account takeover or impersonation as a workforce identity threat

32% of IT and security leaders cite negligent employee security behavior as a workforce identity threat

31% of IT and security leaders are very confident they can verify contractor and temporary access

54% of IT and security leaders measure AI-driven impersonation such as deepfakes and synthetic identities in some way

46% of IT and security leaders do not currently measure AI-driven impersonation at all

22% of IT and security leaders say the IT team has primary responsibility for workforce identity security

20% of IT and security leaders say the Chief Information Officer has primary responsibility for workforce identity security

8% of IT and security leaders say the Chief Human Resources Officer or HR team has primary responsibility for workforce identity security

4% of IT and security leaders say there is no single owner for workforce identity security

91% of organizations have experienced a workforce identity incident or near miss in the past two years

43% of IT and security leaders are very confident they can reliably verify identity during employee onboarding