NCC Group teams up with SailPoint on identity security

NCC Group has entered into a collaboration with SailPoint on identity security services, extending its work on securing both human and non-human identities.

The arrangement will allow NCC Group to deliver and manage identity security services worldwide using SailPoint's platform. It is focused on helping organisations govern access across cloud, hybrid and AI-enabled environments as machine and AI-driven identities grow alongside human users.

The cyber security company plans to offer managed identity governance and administration, advisory and implementation services, and security controls aimed at AI agents and automated processes. These services are intended to address issues including privilege sprawl, insider risk, compliance demands and new attack surfaces linked to AI systems.

Identity management has become a central concern for businesses as access rights spread across employees, contractors, software bots, connected systems and AI tools. Companies in regulated sectors in particular face pressure to show tighter control over who or what can access sensitive data and systems.

SailPoint provides identity security software designed to give organisations visibility and governance over human, machine and AI-driven identities. The collaboration supports NCC Group's identity offering and broadens the services it can provide to customers with complex technology estates.

The announcement also reflects a wider shift in cyber security spending towards identity-focused controls. As attackers increasingly target credentials, privileged accounts and poorly governed service identities, companies are seeking more detailed oversight of access permissions and stronger monitoring of how those permissions are used.

Remco Postma, AVP, Partners and Alliances EMEA at SailPoint, outlined the rationale for the collaboration.

"NCC Group brings a strong combination of deep identity expertise, global delivery capability and long-standing experience securing some of the world's most complex and regulated organisations. As enterprises grapple with the explosion of non-human identities and AI-driven access risk, having a partner that understands both the technology and the real-world security challenges is critical. Together with NCC Group, we're helping customers embed identity security at the core of their cyber resilience strategy across people, machines and the AI systems reshaping the enterprise," said Remco Postma, AVP, Partners and Alliances EMEA at SailPoint.

Growing focus

Non-human identities have drawn more scrutiny as businesses adopt automation, cloud-native applications and AI systems that rely on service accounts, application credentials and autonomous agents. These identities can be difficult to track at scale, especially when they are created quickly across multiple systems and teams.

NCC Group said its services would cover continuous monitoring and optimisation of identity environments, as well as design and deployment work aligned with business risk and regulatory requirements. It also highlighted controls intended to support the adoption of AI and automation by setting access, accountability and governance rules around those systems.

The collaboration adds to NCC Group's broader cyber resilience work across public and private sector clients in Europe, North America and Asia Pacific. The company says it employs more than 2,000 people and has built its business around cyber security and software escrow services.

Derek Gordon, Digital Identity Practise Lead at NCC Group, said identity controls now extend well beyond employee accounts.

"Identity is the backbone of cyber resilience, not just for people but for machines. AI agents and automated processes are increasingly running critical processes at enterprise scale. The combination of SailPoint's identity platform, purpose-built for the AI era, and NCC Group's deep experience securing some of the most complex, regulated environments will help our customers regain control of human and non-human identities, reduce access risk, and safely adopt emerging technologies with confidence and governance built in from day one," said Derek Gordon, Digital Identity Practise Lead at NCC Group.