145 views
Photo from Magnific

More than six in 10 firms track AI Identities; governance gaps remain

A survey found inconsistent controls as AI agents enter enterprise identity systems.

In Singapore, 64% of organisations say artificial intelligence (AI) identities are fully tracked, authenticated, and authorised within formal identity systems, whilst 5% do not track them at all, according to a survey by cybersecurity company Semperis.

The findings are part of a global study of 1,100 organisations examining how companies manage “non-human identities” (NHIs), which include AI agents that are granted access to enterprise systems.

The report said NHIs are increasingly being used in corporate environments as organisations deploy AI tools in internal workflows. These AI agents often require access to identity systems such as Active Directory, Entra ID, and Okta to perform tasks.

In Singapore, 56% of organisations use the same identity systems for both AI agents and human users, whilst 44% manage them through separate systems.

Semperis said the use of AI agents adds additional identity layers within enterprise environments, particularly where access is based on credentials.

It added that this increases the importance of maintaining consistent tracking, authentication, and governance over all identities, including non-human ones.

Join Singapore Business Review community
A NOTE FROM SINGAPORE BUSINESS REVIEW

The people you want to reach are already in this room.

Every quarter, SBR lands on the desks of the founders, CFOs, and directors running Asia's most consequential companies. Every day, they open our newsletter and read our website. It's a room that took twenty years to build — and it's the one most of our partners are trying to get into.

The good news is that the door is open. We work with companies on thought leadership articles, sponsored content, industry summits across Southeast Asia, regional awards programmes, podcasts, and media placements in print and digital. The shape of the right partnership depends on what you're trying to do, which is why we'd rather start with a conversation than send a rate card.


If you have something this room should know about, tell us. We'll tell you honestly whether we can help, and how.

No rate cards until we understand the brief. It's a better use of everyone's time.