Notifications
Clear all
Topic starter
23/06/2026 9:24 pm
TL;DR: Sri Lankan organisations are modernising across cloud, SaaS, automation, and digital services while identity sprawl, unsanctioned applications, and non-human identities complicate governance, visibility, and compliance, according to Saviynt. The real issue is not distribution, but whether identity controls can keep pace with a widening trust boundary across human and machine access.
NHIMG editorial — what this means for NHI practitioners
Questions worth separating out
Q: How should IAM teams govern human and non-human identities in the same programme?
A: Start with one inventory, one ownership model, and one review standard for all identities that can access systems or data.
Q: Why do cloud, SaaS, and automation make identity governance harder?
A: They increase the number of identities, the frequency of access change, and the number of places where entitlement drift can occur.
Q: What breaks when service accounts and applications are left outside governance reviews?
A: You lose accountability, lifecycle control, and visibility into standing access.
Practitioner guidance
- Map all identity classes into one governance model Inventory human users, contractors, service accounts, applications, and other non-human identities in the same control framework so ownership, lifecycle status, and review cadence are explicit.
- Unify privileged access and identity governance reviews Use one entitlement review process for high-risk access paths so PAM, IGA, and machine identity oversight do not produce conflicting decisions about the same account or workload.
- Prioritise identity discovery before Zero Trust expansion Classify applications, API-driven accounts, and unsanctioned identities before extending policy enforcement so the programme can verify what it cannot yet control.
What's in the full announcement
Saviynt's full press release covers the operational detail this post intentionally leaves for the source:
- The local partner distribution structure and how ORIN Corporation will support Sri Lankan enterprises and channel partners.
- The vendor's own explanation of its converged platform components, including IGA, Cloud PAM, and Autonomous Access Governance.
- Direct quotes on market positioning, regional expansion, and the partner-first strategy behind the announcement.
- The specific go-to-market and enablement support ORIN says it will provide for customers and partners.
👉 Read Saviynt's announcement on its Sri Lanka partnership with ORIN Corporation →
Sri Lanka identity security distribution: what changes for governance teams?
Explore further
View Full Forum → | NHI Foundation Course → | Our Services →
25/06/2026 2:42 am
Identity sprawl is now a governance problem, not just an access problem. The article correctly centres the expansion of employees, contractors, partners, applications, and non-human identities as one control challenge. That matters because governance fails when identity types are managed in separate operating models with different review cadences and ownership rules. Practitioners should read this as a warning that access visibility and lifecycle control are no longer separable disciplines.
A few things that frame the scale:
- 72% of organisations have experienced or suspect they have experienced a breach of non-human identities, according to The 2024 ESG Report: Managing Non-Human Identities.
- Enterprises that have experienced a compromised NHI averaged 2.7 separate incidents in the past 12 months, which shows how quickly one identity failure can become an operational pattern.
A question worth separating out:
Q: How do organisations know whether Zero Trust is really working for identities?
A: Look for complete identity inventory, continuous verification, and consistent policy enforcement across people, workloads, and applications. If some accounts are invisible, some access paths are exempt, or review cycles cannot explain current privilege, the Zero Trust model is only partial. Effective programmes can show who or what accessed what, when, and under which policy.
👉 Read our full editorial: Saviynt's Sri Lanka partnership spotlights identity security scale
