Topic starter
24/06/2026 11:13 pm
TL;DR: 94% of organisations see AI as the most significant cyber risk, and 87% say AI-related vulnerabilities are the fastest-growing threat, according to Silverfort’s analysis of World Economic Forum survey findings. Identity governance has to treat human, non-human and AI-driven access as one fabric instead of separate silos.
Editorial analysis by NHI Mgmt Group, based on content published by Silverfort: “Identity is the new control plane: Lessons from the World Economic Forum’s Global Cybersecurity Outlook 2026”.
By the numbers:
- 94% of organisations identify AI as the most significant driver of cyber risk.
- 73% of respondents were personally affected by cyber-enabled fraud.
Key questions
Q: Why do service accounts and other non-human identities increase breach impact?
A: Service accounts and other non-human identities increase breach impact because they often carry broad, persistent access and bypass interactive controls like MFA.
Q: What are the signs that traditional identity governance is not keeping up with access risk?
A: Traditional governance is lagging when it can only tell who has access, not whether that access is being used appropriately.
A: Static credentials create durable access that is hard to control in automated environments.
Practitioner guidance
- Map every trusted identity path Inventory humans, service accounts, APIs, bots and AI agents together so the programme reflects the full access fabric rather than only employee accounts.
- Replace implicit trust with continuous validation Use adaptive access decisions, context-aware step-up checks and behaviour monitoring so authentication is not the end of the security decision.
- Shrink standing privilege across third parties Review vendor and partner access for broad, persistent permissions and enforce time-bounded access wherever business operations allow.
Bottom line: The report ties AI-driven attacks, fraud and supply-chain compromise to the same root condition: identity trust is too broad and too static.
Glossary terms: Identity Control Plane, Inherited Trust, Standing Privilege, Continuous validation
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 15 hours ago by NHI Mgmt Group
25/06/2026 7:59 am
Identity trust has become the dominant attack surface because access control now matters more than perimeter control. The article reinforces a structural shift that many programmes still understate: attackers increasingly bypass systems by using valid identities, not by breaking infrastructure first. That means authentication, authorization and lifecycle governance are now first-order security controls, not back-office administration. Practitioners should treat every access path as a security boundary.
A few things that frame the scale:
- 92% of organisations expose NHIs to third parties, raising concerns about supply chain security, according to the Ultimate Guide to NHIs.
A question worth separating out:
Q: Should organisations prioritise identity visibility or access automation first?
A: Visibility comes first. If teams cannot see who has access, how that access is used, and where sensitive data lives, automation simply accelerates incomplete governance rather than improving it.
👉 Read our full editorial: Identity security lessons from WEF 2026: why identity is the control plane