New Rubrik Research: Identity Resilience Is Imperative as AI Agents Flood Workplace
84% of Singapore Leaders Cite Identity Attacks as Top Concern, According to Rubrik Zero Labs
New research from Rubrik Zero Labs uncovers a troubling gap between the expanding identity attack surface and organisations’ ability to recover from resulting compromises. The Artificial Intelligence (AI) wave is translating into an increase of AI agents in the workplace, which equates to a surge of both non-human identities (NHIs) and agentic identities. This is resulting in an urgent focus for CIOs and CISOs on identity threats and recovery. The report—Identity Crisis: Understanding & Building Resilience Against Identity-Driven Threats—shows that as AI adoption expands across organisations worldwide, enterprises are taking decisive action to strengthen identity resilience.
“I could have unlimited amounts of technology in place. But if someone socially engineers our support desk to hand over admin passwords, that’s the end of the game,” said Andrew Albrech, Chief Information Security Officer at Dominos. “That’s why identity resilience is key.”
Illustrating this trend:
- 90% of Singapore organisations plan to hire professionals within the next 12 months specifically to manage or improve identity management, infrastructure, and security.
- 94% of IT and security leaders in Singapore actively plan to change Identity and Access Management (IAM) providers, or have already begun the process.
- 58% cite security concerns as the primary driver to switch IAM providers.
“Since a single compromised credential can breach an organisation’s most critical data, traditional security boundaries are no longer enough,” said Ananth Nag, Vice President, APAC at Rubrik. “For nations like Singapore, innovation demands higher stakes. Organisations must embed comprehensive Identity Resilience, using real-time intelligence to stop threats, govern AI behaviour, and recover quickly to protect business and trust.”
Agentic AI Opens the Door to New Identity Challenges
As organisations integrate agents into their workflows, NHIs will continue to outpace the growth of human identities. In fact, industry reports contend that NHIs now outnumber human users by 82-1. Securing NHIs will become as essential—if not more—as securing human identities, given the growing complexity of managing AI agent operations.
Rubrik’s research found that:
- 92% of Singapore respondents have fully or partially incorporated AI agents into their identity infrastructure, and an additional 7% have plans to.
- Nearly half of Singapore IT security decision-makers (44%) estimate that in the next year, 50% or more of the cyberattacks they deal with will be driven by agentic AI.
Weakening Confidence in Recovery Strategies Highlights Need for Identity Resilience
Identities are the keys to access an organisation’s most sensitive data. Therefore, IT and security leaders must build resilient identity services and infrastructures to ensure a quick recovery and restoration of operations in the face of an attack.
However, overall confidence in recovery times is declining. Rubrik’s research finds that:
- In 2025, only 20% of Singapore respondents believed they could fully recover from a cyber incident in 12 hours or less, compared to 52% in 2024.
- Over half (64%) of Singapore respondents believe it would take at least two days to recover and achieve full-service operations post-compromise.
- Of those who experienced a ransomware attack in the past year, 97% paid a ransom to recover their data, or stop the attack.
Organisational concern over the state of identity security is valid, and IAM tools alone are not enough to properly address these challenges. CIOs and CISOs need a comprehensive identity resilience strategy for when, not if, an attack strikes.
To read the full report, visit https://zerolabs.rubrik.com/.
