Any organisation that runs IT, uses cloud services or has remote workers, whatever its size. It's especially useful if you have no dedicated security team, you carry compliance obligations, you work across several sites or clouds, or you're an MSP wanting to tighten your clients' security.