Topic starter
05/12/2025 5:13 pm
TL;DR: Identity remains central to breach reduction, according to Saviynt's analysis of more than 22,000 incidents and breaches, with 88% of web application attacks using stolen credentials and 60% of breaches involving a human element. AI expands the attack surface, but governance still starts with identity, external access, and credential control.
Editorial analysis by NHI Mgmt Group, based on content published by Saviynt: “Don’t Be Misled: Why Identity Security Is Still Key”.
Key questions
Q: How should security teams govern third-party identity access?
A: Security teams should inventory every external identity path, assign an internal owner, and apply scope, expiry, and revocation rules to each connection.
Q: Why do stolen credentials remain such an effective attack path?
A: Stolen credentials work because many systems still treat a successful login as enough evidence of legitimacy.
Q: What breaks when genAI use sits outside corporate visibility?
A: Identity governance loses the ability to see which users, sessions, and devices are interacting with sensitive data through AI tools.
Practitioner guidance
- Inventory external identities as a privileged population Map partners, vendors, contractors, and temporary workers to the systems they can reach, then classify them by privilege and business owner so access reviews are not employee-only exercises.
- Shorten the life of exposed credentials Review where credentials are stored, shared, or reused across applications, especially in web application access paths and integrations that can be reached through stolen secrets.
- Bring genAI usage into identity telemetry Track which identities are using generative AI tools on corporate devices or with corporate data, and connect that telemetry to access governance so unmanaged usage is visible.
Bottom line: Identity security remains central to breach reduction because credentials, external access, and non-human identities still drive many attack paths.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 10 months ago by Abdelrahman
This topic was modified 5 days ago by NHI Mgmt Group
This topic was modified 3 days ago 2 times by NHI Mgmt Group
07/10/2026 6:20 pm
Identity security remains the governing layer even when AI changes the attack surface. The article's core claim is that organizations misread newer attack patterns if they treat identity as secondary. Credentials, external identities, and access decisions still sit upstream of most breach paths, so AI increases the number of things identity teams must govern rather than replacing the need for governance. The practitioner conclusion is straightforward: security strategy still begins with identity.
A question worth separating out:
Q: How do you know if your identity programme is keeping pace with AI adoption?
A: Look for whether the programme can inventory human, external, and non-human identities in one view, assign ownership consistently, and revoke access quickly when relationships or usage patterns change. If it cannot, AI is already expanding risk faster than governance can absorb it.
👉 Read our full editorial: Identity security still underpins breach reduction in the AI era