2018: $8.3M2019: $11.6M2022: $15.4M2023: $16.2M$17.4M USDTotal average annual cost of insider incidents in 2025
Your board wants answers. This report has them.
Your board wants answers. This report has them.
2018: $8.3M2019: $11.6M2022: $15.4M2023: $16.2M$17.4M USDTotal average annual cost of insider incidents in 2025
81 days to resolve an insider incident, down from 86
Time saved is money saved...
$10.6M for incidents contained under 31 days
$18.7M for those lasting over 91 days
81% of organizations have an insider risk management program
Of those, 63% saved time responding to a breach
65% said their program was the only security strategy that enabled them to pre-empt a breach
$2,437 IT security budget per employee
16.5% dedicated to insider risk management, up from 8.2% in 2023
Equivalent to $402 per employee
45% say this level of funding is not enough
46% expect funding to increase in 2025
The total average annual cost of insider risks has risen, but in a historic first, the average time to contain insider threats has declined.
This year’s Ponemon Institute report reveals growing adoption of insider risk management, with clear benefits. It presents new data on the effectiveness of insider risk management and offers actionable insights to cut costs, avoid fines, and optimize technology through AI and consolidation.
While the cost of insider risk remains significant, the progress being made is clear. If stopping insider threats is the endgame, companies prioritizing insider risk management are gaining a crucial edge.
