Notifications
Clear all
Topic starter
24/06/2026 10:39 pm
TL;DR: Identity security demand is rising across Asia Pacific and Japan as enterprises scale cloud adoption and AI initiatives, according to Saviynt. The shift reinforces that identity programmes must span human, non-human, and emerging AI-driven access patterns rather than treating them as separate problems.
NHIMG editorial — based on content published by Saviynt: Saviynt appoints Alex Lei to drive identity security growth across Asia Pacific and Japan
By the numbers:
- 72% of organisations have experienced or suspect they have experienced a breach of non-human identities , 46% confirmed, 26% suspected.
Questions worth separating out
Q: How should security teams govern identity sprawl during cloud and AI expansion?
A: They should start with a complete inventory of human, non-human, and partner identities, then tie each one to an accountable owner and review cycle.
Q: Why do cloud and AI programmes increase NHI governance risk?
A: Because they multiply service accounts, tokens, and delegated access faster than manual controls can track.
Q: What do IAM teams get wrong about partner access in regional growth programmes?
A: They often treat partner access as temporary and lower risk, even when it connects directly to production systems.
Practitioner guidance
- Map identity ownership across every regional business unit Build a single inventory that shows which teams own human users, service accounts, API tokens, and partner identities across APJ operations.
- Extend lifecycle controls to third-party access Require the same approval, recertification, and offboarding treatment for partners and contractors that internal users receive.
- Review non-human access tied to cloud and AI programmes Identify service accounts, workload identities, and tokens created for cloud migration or AI initiatives, then confirm whether each still needs standing access.
What's in the full analysis
Saviynt's full post covers the operational detail this post intentionally leaves for the source:
- The regional sales leadership scope and the business priorities tied to APJ enterprise growth
- The company’s own framing of how cloud adoption, AI initiatives, and identity security demand intersect in the region
- The leadership background and career history of Alex Lei across enterprise security and technology sales
- The vendor’s positioning on identity security as part of enterprise digital transformation
👉 Read Saviynt's announcement on APJ identity security leadership →
APJ identity security growth: what it means for IAM teams?
Explore further
View Full Forum → | NHI Foundation Course → | Our Services →
25/06/2026 7:25 am
APJ identity security growth is a governance signal, not just a market signal. When enterprises accelerate cloud adoption and AI deployment, identity becomes the first control plane that has to absorb the change. That makes the underlying issue lifecycle governance across humans, NHIs, and delegated machine access rather than a narrow sales or tooling story. Practitioners should treat regional expansion as a prompt to tighten identity operating models, not just to buy more software.
A few things that frame the scale:
- 85% of organisations lack full visibility into third-party vendors connected via OAuth apps , 38% have no or low visibility, and a further 47% have only partial visibility, according to The State of Non-Human Identity Security.
- A separate finding from the same research shows that lack of credential rotation is cited as the top cause of NHI-related attacks by 45% of organisations, followed by inadequate monitoring and logging at 37%.
A question worth separating out:
Q: How do you know if identity governance is keeping pace with APJ expansion?
A: Look for shrinking exception counts, clean ownership records, and consistent offboarding of dormant access across regions. If those signals move in the wrong direction while cloud and AI programmes expand, governance is lagging. Good identity control is visible in lower ambiguity about who can act, on what systems, and for how long.
👉 Read our full editorial: APJ identity security growth points to wider governance pressure
