Notifications
Clear all
Topic starter
25/06/2026 12:18 am
TL;DR: RSA says its Cairo operation will expand over three years, with new hiring tied to a center of excellence, while also noting its platform serves more than 9,000 high-security organizations and manages over 60 million identities, according to RSA Security. The real signal is that identity programmes are becoming more globally distributed and operationally dependent, which raises the bar for governance, supportability, and lifecycle control.
NHIMG editorial — based on content published by RSA Security: RSA CEO outlines expansion plans in Egypt and participates in presidential roundtable
By the numbers:
- 9, ore than 9,000 high-security organizations trust RSA to manage more than 60 million identities.
- 45% of organisations cite lack of credential rotation as the top cause of NHI-related attacks.
Questions worth separating out
Q: How should identity teams evaluate a vendor expansion without losing governance control?
A: Treat expansion as an operating-model test, not a branding event.
Q: Why does vendor delivery footprint matter to IAM and identity governance programmes?
A: Because identity controls fail operationally long before they fail conceptually.
Q: What should security teams look for when a major identity platform expands operations?
A: Look for evidence that the vendor can preserve service consistency, governance workflows, and escalation quality as headcount and customer volume rise.
Practitioner guidance
- Review vendor operating-model dependence Map which identity processes rely on regional support, escalation, or engineering response, then classify them by business criticality and audit impact.
- Test governance consistency across environments Verify that approval, provisioning, and recertification workflows behave the same in cloud, hybrid, and on-premises estates before expanding scope.
- Separate product capability from delivery assurance Assess whether passwordless access, risk-based access, and identity intelligence remain operationally supportable during scale-up, not just technically available.
What's in the full analysis
RSA Security’s full news release covers the operational detail this post intentionally leaves for the source:
- The specific wording of the MoU with ITIDA and what it commits RSA to over the next three years.
- The hiring and investment narrative tied to Cairo-based expansion and local talent development.
- The broader company positioning around passwordless identity security, risk-based access, and automated identity intelligence.
- The statements made by RSA and ITIDA leaders about Egypt’s role in regional digital services growth.
👉 Read RSA Security’s announcement on its Egypt expansion and roundtable participation →
RSA expansion in Egypt: what it means for IAM and identity teams?
Explore further
25/06/2026 9:11 am
Operational scale is now part of identity governance, not separate from it. RSA’s expansion in Egypt shows that identity security vendors are competing on execution capacity as much as on product breadth. For practitioners, that matters because support quality, engineering responsiveness, and change control all influence whether identity governance is reliable in real environments. The programme question is no longer only what the platform can do, but whether the operating model behind it can sustain secure identity administration at scale.
A few things that frame the scale:
- Only 1.5 out of 10 organisations are highly confident in their ability to secure NHIs, compared to nearly 1 in 4 for securing human identities, according to The State of Non-Human Identity Security.
- Lack of credential rotation is cited as the top cause of NHI-related attacks by 45% of organisations, followed by inadequate monitoring and logging at 37% and over-privileged accounts at 37%, according to the same research.
A question worth separating out:
Q: How do global identity operations affect lifecycle and access review processes?
A: They increase the number of handoffs, exceptions, and support dependencies involved in keeping access accurate. That makes lifecycle governance more sensitive to process drift and missed accountability. Teams should verify that offboarding, recertification, and privilege changes remain traceable across regions and teams.
👉 Read our full editorial: RSA expansion in Egypt signals identity operations scaling pressure
