Most security teams know where sensitive data is stored. Very few know where it goes, or what it becomes. As data moves across more environments, changes form, and enters AI workflows, security teams lose the context needed to enforce policy, investigate exposure, and prove what happened.
Cybersecurity Insiders surveyed 1,064 cybersecurity practitioners to measure the data protection gap between where sensitive data moves and where security can follow.
Some Key Findings:
• Fragmented tools, fragmented protection: 58% of organizations operate eleven or more data security tools, yet only 7% describe their stack as fully unified. 60% say their approach is moderately or highly fragmented. The issue is not lack of coverage but a lack of coordination.
• Visibility and response weaken as data moves: Confidence in tracing sensitive data drops from 25% for identifying who accessed a document to 8% for tracing AI-generated content back to its source. Only 7% can track data moving between
applications in real time.
• Data that changes form escapes detection: Only 9% can recognize sensitive data reliably after it has been modified. 17% rely on exact-match detection that fails when content is copied, summarized, or rewritten. The file may never leave in its original form, but the sensitive content still does.
To learn more, download the report at right.
