278 views
Photo from Unsplash

Singapore firms face rising shadow AI without strong governance

Only 70% report having full visibility into machine identity security.

Singaporean organisations are encountering shadow AI more frequently than any other country, with 62% reporting unsanctioned AI use at least once a month, according to identity security provider Delinea.

Of those, 38% experience such incidents multiple times per month.

Despite these concerns, Singapore ranks highest globally in AI security readiness, with 52% of organisations saying they are fully prepared to secure AI tools—compared to the global average of 44%.

However, the report highlighted a potential mismatch between perceived readiness and actual practices. Whilst 97% of firms are confident in their machine identity security, only 70% report having full visibility into these identities, and just 56% have formal AI governance policies in place.

The study, which surveyed over 1,700 IT decision-makers worldwide, noted that 91% of Singaporean businesses already use generative or agentic AI in daily operations. As usage grows, concerns have emerged around specific risks.

The most commonly cited threats include AI-generated phishing and deepfakes (54%), autonomous systems with unchecked access (52%), credential theft driven by AI (47%), shadow AI (46%), and limited visibility into AI workflows (40%).

The report also found that just 63% of global organisations have acceptable use policies for AI tools, and 64% have implemented access controls for AI agents. 
 

Join Singapore Business Review community
Join Singapore Business Review community
A NOTE FROM SINGAPORE BUSINESS REVIEW

Reaching the people who run Asia's businesses is harder than it used to be.

Inboxes are crowded. Attention is short. The executives you most want to reach — the founders, CFOs, and operators who actually move budgets — are the hardest to find through the usual channels. If you're building a company, a category, or a reputation, you already know this.

We've spent twenty years building the room they read. Singapore Business Review is where senior decision makers in Singapore and across Southeast Asia come for business coverage they can't get elsewhere — in print, online, and in person at the summits and roundtables we host across seven markets.

If you have something these readers should know about — a point of view worth publishing, a product worth their attention, an event worth their time — we'd like to hear what you're trying to do.