
(92 percent) stemmed from unmanaged devices connected to the corporate network.
If this doesn't make you sit up and listen I don't know what metric or snippet of information will.
I'm still finding similar issues in every organisation I review, that issue is one of not having a full handle on the devices attached to one's network.
All you can do is keep educating and hope people understand what a good posture looks like.
Unfortunately convenience for the end user must come second place to the need for good security practices being put in place first.