Challenges in Managing Non-Human Identities Amid AI Adoption

Non-human identities (NHIs) are now prevalent in enterprises, outnumbering human employees 50 to 1. Despite a high adoption of multi-factor authentication (MFA) in India, only 10% of organizations have a strategy for managing NHIs. The rapid creation of NHIs through automated processes leads to security blind spots, including shadow identities with undetected permissions. These vulnerabilities can be exploited by attackers, complicating compliance and forensic investigations. Regulatory pressures, such as the Digital Operational Resilience Act (DORA), necessitate improved governance of NHIs. Organizations are urged to establish central databases for NHIs and integrate them into identity and access management (IAM) frameworks. The lack of oversight over machine identities poses significant risks to security and compliance. The situation calls for immediate action to ensure transparency and control.

Key Points: • Non-human identities outnumber human employees 50 to 1 in enterprises. • Only 10% of organizations have a strategy for managing non-human identities. • Shadow identities create security blind spots and compliance issues.