Topic starter
11/06/2026 11:55 pm
TL;DR: Identiverse 2025 conversations highlighted a shift from identity governance to identity intelligence as machine identities, shadow AI, and real-time policy enforcement became central concerns, according to Zluri. The governance model is changing because visibility without action is no longer enough for NHIs, AI agents, and human access programmes.
Editorial analysis by NHI Mgmt Group, based on content published by Zluri: “Learnings from Identiverse 2025: Shadow AI, NHIs, and Smarter Access”.
Key questions
Q: What breaks when identity governance still relies on manual approvals and rule maintenance at scale?
A: Manual governance increases error, slows access decisions, and raises the chance that users receive inappropriate or delayed access.
Q: Why does Shadow AI create new risk in application security?
A: Shadow AI creates risk because code can be shaped by unapproved assistants outside normal review and policy controls.
Q: How do security teams know behavioral identity intelligence is actually working?
A: It is working when teams see fewer false positives, faster identification of credible anomalies, and better separation between harmless deviation and real threat.
Practitioner guidance
- Inventory AI-linked access paths Map every AI tool, integration, and connected account that touches corporate systems, including unsanctioned tools discovered outside IT approval channels.
- Classify machine identities as governed assets Assign ownership, business purpose, and expiry expectations to service accounts, API keys, and AI agent identities so they can be reviewed like other privileged access.
- Shift policy enforcement to change time Trigger access evaluation when roles change, applications are added, or new integrations appear, instead of waiting for periodic certification cycles.
Bottom line: The article argues that identity governance is moving toward identity intelligence because dashboards alone do not prevent unmanaged access from spreading across machines and AI tools.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 4 days ago by NHI Mgmt Group
12/06/2026 8:49 am
Identity intelligence is replacing identity governance as the operating model because visibility without action no longer contains risk. The article captures a real shift in practitioner expectations: organisations want decisions enforced in real time, not just observed in dashboards. That is a programme design change, not a tooling preference. The implication is that identity teams must measure governance by intervention speed, not inventory depth.
A few things that frame the scale:
- 63% of organisations surveyed lacked AI governance policies to manage AI or prevent shadow AI, according to IBM's 2025 Cost of a Data Breach Report.
A question worth separating out:
Q: What should organisations do when machine identities already outnumber human identities?
A: Treat that as a governance design change, not just an inventory problem. Rebuild identity controls around lifecycle enforcement, automated renewal and revocation, and continuous drift detection so the programme matches machine speed instead of reporting on it after the fact.
👉 Read our full editorial: Shadow AI and NHIs are forcing identity governance to change
This post was modified 4 days ago by NHI Mgmt Group