Notifications
Clear all
Topic starter
08/06/2026 4:50 pm
TL;DR: C1’s 2025 Future of Identity Security Report finds that 27% of security leaders report high or very high regular stress, while 82% of organisations experienced an identity-based breach or attack in the past year, linking workload pressure directly to lived exposure. The real governance issue is that identity risk now lands on teams already operating at the edge of capacity, so resilience is becoming an operational control, not a soft benefit.
NHIMG editorial — based on content published by ConductorOne: The Pressure Is Real: Inside the Stress and Resilience of Today’s Security Leaders
By the numbers:
- 27% said they experience high or very high levels of stress on a regular basis.
- 82% of organizations surveyed experienced an identity-based breach or attack in the past year.
- 80% of identity breaches involved compromised non-human identities such as service accounts and API keys.
Questions worth separating out
Q: How should security teams keep identity governance reliable when workloads are high?
A: Security teams should simplify recurring governance work, automate routine approvals where possible, and reserve human attention for exceptions and high-risk decisions.
Q: Why does identity breach pressure increase operational risk for IAM teams?
A: Identity breaches increase pressure because they create more investigation work, more urgent decisions, and more competing priorities for the same operators.
Q: What do organisations get wrong about resilience in security operations?
A: Many organisations treat resilience as a personal trait instead of a programme property.
Practitioner guidance
- Map identity workload hotspots Identify which access reviews, alert queues, offboarding tasks, and exception approvals consume the most time under incident pressure.
- Reduce manual dependency in recurring governance tasks Automate the repetitive parts of entitlement review, deprovisioning, and evidence collection so the team can preserve judgment for the cases that actually need it.
- Build resilience into IAM operating metrics Track review completion, exception ageing, and time-to-containment alongside traditional security KPIs.
What's in the full article
ConductorOne's full blog covers the report context and the workforce wellbeing details this post intentionally leaves at the source:
- Survey framing and respondent context behind the 2025 Future of Identity Security Report, useful if you need to understand how the stress findings were collected.
- The report's broader identity-security outlook beyond wellbeing, including how leaders are adapting to AI change and breach pressure.
- Additional discussion of leadership pressure points, including budget constraints and stakeholder expectations, that sit outside this article's focus.
- The full post also ties the wellbeing findings back to the report narrative, which is useful if you need the original presentation flow.
Identity breach pressure and security leader burnout: what teams need?
Explore further
08/06/2026 6:42 pm
Security leader stress is now an identity governance variable, not a side effect. The article shows that pressure is rising in the same period that identity attacks are intensifying, which means the operating environment itself is becoming harder to govern. When access review, breach triage, and policy enforcement all depend on the same people, stress can become a hidden control degradation. The practitioner conclusion is straightforward: governance programmes must account for operator capacity, not just technical coverage.
A few things that frame the scale:
- 91.6% of secrets remain valid five days after the targeted organisation is notified, showing a critical gap in remediation procedures, according to Ultimate Guide to NHIs.
- Only 5.7% of organisations have full visibility into their service accounts, which means many teams are operating with incomplete control-plane awareness.
A question worth separating out:
Q: How can leaders tell whether stress is affecting identity governance?
A: Look for slower review cycles, growing exception backlogs, delayed offboarding, and more reliance on manual follow-up after incidents. Those are practical signals that the team is losing governance capacity. When the same people are expected to respond to breaches and maintain access discipline, stress becomes visible in execution before it appears in policy.
👉 Read our full editorial: Security leader stress is rising as identity breaches intensify
