Topic starter
04/07/2026 9:27 pm
TL;DR: Roughly 98% of the company’s internal workforce now uses AI tooling, with AI Champions embedded across departments, as the company pairs rapid growth with more intentional in-person collaboration and sustainable work practices, according to 1Password. The deeper lesson is that identity and security programmes now depend on culture, trust, and AI fluency as much as on tooling.
Editorial analysis by NHI Mgmt Group, based on content published by 1Password: “How 1Password’s culture is evolving”.
Key questions
Q: How should security teams govern employee AI use without blocking productivity?
A: Start with visibility into sanctioned and shadow AI use, then apply runtime policies that inspect intent and context rather than only keywords.
Q: Why do renewal workflows matter to identity and access management teams?
A: Because renewal decisions often keep software, integrations, and access alive long after the original need has changed.
Q: How can organisations tell if AI enablement is helping rather than creating new risk?
A: Look for whether employees use AI confidently without bypassing review, whether sensitive information stays out of unapproved tools, and whether managers can explain the rules clearly.
Practitioner guidance
- Define acceptable AI use at the point of work Document when employees may use AI tooling, what data must never be pasted into it, and what review is required before AI-assisted outputs influence security or access decisions.
- Build AI fluency into security training Train managers and team leads to recognise risky AI use patterns, explain the policy in plain language, and reinforce the same expectations in one-to-one and team settings.
- Use culture metrics alongside control metrics Track whether teams understand access and collaboration rules, whether they escalate uncertainty quickly, and whether exceptions are handled consistently across functions.
Bottom line: AI adoption inside a security company is no longer just a productivity story, because it changes how people make security-relevant decisions every day.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
04/07/2026 9:28 pm
AI fluency is becoming part of identity governance, not a sidecar to it. When most of a workforce uses AI tools, the organisation is managing a new class of employee behaviour that affects data handling, decision quality, and policy adherence. That makes enablement, trust, and guardrails inseparable from security outcomes. The practical conclusion is that IAM and security leaders now need governance models that account for how people work with AI, not just what systems they can reach.
A question worth separating out:
Q: What should security leaders do when growth outpaces the team’s operating rhythm?
A: Slow down the highest-risk decisions and create more structured forums for ambiguity. That usually means clearer ownership, better escalation paths, and deliberate collaboration around access, exceptions, and policy changes. Speed still matters, but unstructured speed usually creates inconsistent security outcomes.
👉 Read our full editorial: 1Password’s AI-enabled culture shows how security teams scale