Topic starter
12/06/2026 10:15 pm
TL;DR: Remote work pushed identity to the centre of enterprise security, while Axiad cites Gartner, The Economist, and its own survey data showing 71% phishing, 61% malware, and 52% of tech leaders seeing policy workarounds. The lesson is that user-friendly authentication and credential governance now determine whether remote productivity increases or security exceptions spread.
Editorial analysis by NHI Mgmt Group, based on content published by Axiad: “What you need to know about ‘Identity-first Security’: The rise of remote”.
By the numbers:
- remote work was around 5% before the pandemic and rose to 60% by spring 2020, according to The Economist cited by Axiad.
- Axiad’s Remote Work Survey found that phishing threats affected 71% of respondents.
- Axiad’s Remote Work Survey found that malware affected 61% of respondents.
Key questions
A: Start with the highest risk access paths, then expand MFA coverage in phases.
Q: Why do remote employees create more identity risk than office-based users?
A: Remote employees often authenticate from less controlled devices and networks, then depend on cloud and SaaS access that may be broader than their day-to-day task set.
Q: What are the signs that remote access controls are not working as intended?
A: Warning signs include vulnerable endpoints, misconfigured remote access systems, users reaching sensitive data they do not need, and audit findings that show policies are not being followed.
Practitioner guidance
- Standardise authentication paths Reduce the number of credential types each workforce segment must manage, and make the primary path simple enough that users do not need informal workarounds to stay productive.
- Track policy workarounds as a security signal Feed reports of user bypasses, shadow access habits, and exception requests into identity governance reviews so friction patterns are visible before they become normal behaviour.
- Rationalise the credential estate Map which applications, devices, and remote access methods create separate authenticator demands, then remove redundant credential flows where they do not add assurance.
Bottom line: Remote work changed identity from a supporting control into the main security boundary for many enterprises.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 5 days ago by NHI Mgmt Group
13/06/2026 12:53 am
Identity-first security becomes mandatory when work moves outside the perimeter: The article shows that remote work did not merely increase remote access demand. It changed the operating assumption behind enterprise authentication, because access is now distributed across devices, locations, and applications. For identity governance, that means the control point has shifted from network location to credential quality, issuance discipline, and user adoption.
A question worth separating out:
Q: How can IAM teams support remote work without weakening access control?
A: Use identity as the primary control plane, with access decisions driven by role, business need, and risk rather than physical location. That lets teams support distributed work while keeping approvals auditable and consistent across systems and geographies.
👉 Read our full editorial: Identity-first security is becoming the baseline for remote work
This post was modified 5 days ago by NHI Mgmt Group