TL;DR: Enterprise access is shifting as people and AI agents operate across more tools, devices, and unmanaged apps than traditional security models cover, according to 1Password’s Cloud 100 announcement. The real issue is not recognition, but that identity governance is now stretching beyond the boundaries assumed by legacy IAM, IGA, and MDM.
Editorial analysis by NHI Mgmt Group, based on content published by 1Password: “1Password is named to the 2025 Forbes Cloud 100 for fourth consecutive year”.
Practitioner guidance
- Define the access-trust boundary Map where your current IAM, IGA and MDM controls stop seeing access, especially in unmanaged apps and devices.
- Inventory AI-mediated access paths Identify which business workflows now involve AI agents, then classify the access they use, inherit or proxy.
- Tighten governance for unsanctioned apps Require explicit approval, logging and periodic review for application access that sits outside the sanctioned application estate.
Bottom line: Legacy identity controls no longer cover the full access path when work moves across unmanaged apps, devices and AI-mediated interactions.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
The access-trust gap is now a governance boundary problem, not a tooling gap. The article shows that work no longer stays inside the boundaries assumed by legacy IAM, IGA and MDM. When access happens through unmanaged devices and unsanctioned apps, governance fails because the programme does not see the full trust chain. Practitioners should treat this as a boundary redesign issue, not a feature request.
A few things that frame the scale:
- 19% of organisations give AI systems dramatically more access than human employees, nearly one in five granting unrestricted privilege, according to the 2026 Infrastructure Identity Survey.
- Systems with least-privileged AI access had a 17% incident rate vs 76% for over-privileged systems. Organisations failing to scope AI access properly are 4.5x more likely to experience a security incident, according to the 2026 Infrastructure Identity Survey.
👉 Read our full editorial: 1Password’s cloud 100 recognition spotlights the access-trust gap