Subscribe to the Non-Human & AI Identity Journal

Notifications
Clear all

Remote work statistics: what IAM and access teams should rethink


(@nhi-mgmt-group)
Member Moderator
Joined: 1 year ago
Posts: 9016
Topic starter  

TL;DR: Remote work has grown from about 4% of U.S. jobs before the pandemic to more than 15% today, while 74% of employees say remote work makes them happier and 80% of people leaders describe hybrid setups as emotionally draining, according to StrongDM and cited research. The governance lesson is that location flexibility does not remove identity, access, or boundary-management problems; it just shifts them into more fragmented control planes.

NHIMG editorial — based on content published by StrongDM: 11 Surprising Statistics on Remote Work for 2026

By the numbers:

Questions worth separating out

Q: How should security teams govern access for remote workers without relying on the office perimeter?

A: Security teams should govern remote access with continuous verification, device posture checks, and session-level policy enforcement.

Q: Why does hybrid work create more identity governance risk than fully remote work in some organisations?

A: Hybrid work creates more identity governance risk because it adds context switching, duplicate device patterns, and more uneven approval cycles.

Q: What breaks when remote work policies do not include non-human identities?

A: What breaks is the hidden control layer that keeps collaboration and automation running.

Practitioner guidance

  • Rebase remote access on continuous verification Tie remote-session authorisation to device posture, conditional policy, and action sensitivity instead of trusting network location or a successful initial login.
  • Audit hybrid-work lifecycle drift Check whether joiner-mover-leaver workflows update entitlements when employees change working location, devices, or collaboration patterns.
  • Extend governance to supporting NHIs Inventory the service accounts, tokens, and API credentials that keep remote collaboration and automation running, then review them on the same cadence as user access.

What's in the full article

StrongDM's full blog post covers the supporting statistics and workplace findings this post intentionally leaves at the governance level:

  • The cited remote-work survey breakdowns behind the 74% happiness and 80% hybrid exhaustion findings
  • The productivity, cost, and burnout statistics referenced across the article's 11 data points
  • The article's own framing of hybrid work, commute reduction, and employee retention tradeoffs
  • The source reference list that supports each stat for readers who need to trace the original studies

👉 Read StrongDM's remote work statistics article for the source data →

Remote work statistics: what IAM and access teams should rethink?

Explore further

View Full Forum →  |  NHI Foundation Course →



   
Quote
(@mr-nhi)
Member Moderator
Joined: 2 months ago
Posts: 8472
 

Remote work turns access governance into a distributed trust problem. The article shows that productivity gains do not simplify identity control, they spread it across more endpoints, networks, and collaboration channels. That means the old perimeter assumption has already collapsed for day-to-day work. Practitioners should treat remote access as a persistent governance condition, not a temporary exception.

A few things that frame the scale:

  • 88.5% of organisations acknowledge that their non-human IAM practices lag behind or are merely on par with their human identity and access management efforts, according to the 2024 Non-Human Identity Security Report.
  • Only 19.6% of security professionals express strong confidence in their organisation's ability to securely manage non-human workload identities.

A question worth separating out:

Q: Who is accountable when a remote work setup leads to overexposed access or data movement?

A: Accountability usually sits with the team that owns identity policy, the application owners who request access, and the business manager who approves the working model. Remote work does not remove governance responsibility. It increases the need to document who approved the access pattern, who reviews it, and who can revoke it when the setup changes.

👉 Read our full editorial: Remote work statistics show hybrid is still a governance gap



   
ReplyQuote
Share: