Notifications
Clear all
Topic starter
11/07/2026 8:43 pm
TL;DR: As AI-driven impersonation, session hijacking, and cloud-first collaboration erode trust, the article argues that identity management in communication and cloud IAM now form the enterprise security perimeter, according to eMudhra. Passwords and OTPs are increasingly inadequate, while certificate-based authentication and unified governance are positioned as the practical answer to continuous verification.
NHIMG editorial — based on content published by eMudhra: identity management in communication and identity and access management in cloud computing
By the numbers:
- 38% of secrets incidents in collaboration and project management tools like Slack, Jira, and Confluence are classified as highly critical or urgent.
Questions worth separating out
Q: How should security teams handle trust in AI-driven communication channels?
A: Security teams should stop using familiar identity cues as proof of legitimacy and move to continuous verification.
Q: When is certificate-based authentication better than passwords and OTPs?
A: Certificate-based authentication is better when the organisation needs stronger proof that a device, user, or workload is the same identity throughout a session.
Q: What breaks when communication identity and cloud IAM are managed separately?
A: When they are managed separately, an identity compromise in chat, email, or voice can become a cloud access problem before either team notices.
Practitioner guidance
- Map every collaboration channel to an identity owner Inventory the identity types that can initiate or join meetings, chats, calls, and file exchanges.
- Replace static trust cues with session-based verification Remove approval paths that rely on a familiar sender name, voice, or display image as a security signal.
- Build certificate lifecycle controls before scaling CBA Treat certificates as governed credentials, with issuance, renewal, revocation, and inventory controls.
What's in the full article
eMudhra's full article covers the operational detail this post intentionally leaves for the source:
- How eMudhra frames certificate-based authentication for collaboration and cloud access in AI-driven environments.
- The specific feature set behind SecurePass IAM, including credential vaulting, session monitoring, and least privilege enforcement.
- The vendor's compliance positioning across GDPR, ISO, and NIST references for identity governance.
- How eMudhra describes the shift from OTPs to PKI-backed authentication in practice.
👉 Read eMudhra's analysis of identity trust in communication and cloud computing →
Identity trust in cloud communication: are your controls keeping up?
Explore further
11/07/2026 9:09 pm
Passwords are no longer the trust anchor for cross-channel identity. This article is right to treat communication identity and cloud IAM as one problem space, because attackers now move from message deception to access abuse without changing techniques. The governance issue is not authentication alone, but whether identity proof survives across channels, sessions, and workloads. Practitioners should stop treating password strength as a primary trust control.
A few things that frame the scale:
- 88.5% of organisations acknowledge that their non-human IAM practices lag behind or are merely on par with their human identity and access management efforts, according to The 2024 Non-Human Identity Security Report.
- Only 19.6% of security professionals express strong confidence in their organisation's ability to securely manage non-human workload identities.
A question worth separating out:
Q: Who should own identity risk in collaboration platforms and cloud access flows?
A: Ownership should sit with the programme that controls identity policy end to end, not with the channel owner alone. Collaboration, IAM, PAM, and security operations all need defined responsibilities, because the risk crosses boundaries. If no one owns the full trust path, attackers will exploit the handoffs between teams.
👉 Read our full editorial: Identity trust in cloud communication is replacing passwords in 2025
