Executives Rank AI-related Identity Risks as Top Concern, Yet 97% Admit They Lack Full Preparedness
Summary
A new Annual Pulse from The Identity Underground shows only 3% of organizations feel very prepared for AI-driven identity attacks (implying 97% lack full preparedness) even though 54% of executives name AI-enhanced identity threats as their top concern. Practitioners report legacy systems (NTLM, credential stuffing, third-party access sprawl) create persistent identity risk and slow modernization. Many organizations are consolidating and modernizing identity security—55% are implementing unified identity platforms and 69% deploy SIEM with identity analytics—but detection capability far outstrips automated response (68% confident in detection vs. only 8% with real-time detection plus automated response). The report warns that non-human identities and AI agents expand the attack surface and urges integrated, inline controls that reduce friction while enabling real-time response.