The Non-Human Identity Management Group launched a Poll on LinkedIn asking what type of Non-Human Identity use case concerns the most from a Security Risk Standpoint.
Very interesting results on what is the most concerning use case from a security risk standpoint :
- Service Accounts – 57%
- API Keys/Tokens – 28%
- NHIs in Robotic RPA Bots – 8%
- NHIs in IoT Devices – 7%
No surprise to see Service Accounts taking top spot given this is the most prevalent NHI that we have in the industry.
We would have thought API Keys/Tokens would have got a much higher vote, given many breaches involve them.
Surprising that IoT Devices in particular, did not get a bigger share of the vote, clearly showing this is an under represented or less understood area, but one that is increasingly becoming a big threat vector for organisations.