Report by Mimecast
The State of Human Risk 2026
Key Findings
36% of organizations still relying on manual monitoring of communications data.
Only 40% of respondents have specific strategies to counter AI-driven attacks.
Just over half of organizations now use AI for threat detection and real-time monitoring, up from 46% the prior year.
96% of organizations admit they have incomplete protection against human risk.
Organizations that succeed in integrating cybersecurity tools report 40% faster threat remediation and far more comprehensive visibility.
48% of organizations are investing in AI-powered monitoring tools.
59% of respondents lack confidence they can quickly locate communications data for regulatory or legal requirements.
23% of organizations manage policies manually.
69% of respondents see AI-driven attacks as inevitable within 12 months.
65% of organizations find integrating cybersecurity tools too complicated.
71% of respondents expect negative business impact from attacks via Slack, Teams, Zoom, and similar platforms in 2026.
91% of organizations face obstacles ensuring employee compliance.
44% of organizations are training employees to recognize AI-driven exploitation.
41% of organizations have created specific AI usage policies.