Malis Selamat Interview: Identity Security Becomes the Core Issue in Cybersecurity

As digital transformation accelerates, identity security has become a core issue in enterprise cybersecurity strategy. According to Sophos's newly released 2026 State of Identity Security Report, as many as seventy percent of enterprises experienced an identity breach in the past year, underscoring the urgency of identity security. To gain deeper insight into this trend, the Techritual editorial team interviewed Malis Selamat, General Manager, Greater China, Sophos, to discuss the challenges of identity security and future response strategies.

Breaking Resource Constraints, Democratising Cybersecurity

Malis Selamat said that Sophos's long-term vision is to break free from the limitations of resources and headcount, and bring reliable cybersecurity protection to every organisation. He pointed out that with the arrival of the AI era, enterprises can no longer rely on continuously adding tools to respond to threats, but instead need a connected cybersecurity defence system.

We want to help users move from using isolated, standalone security products towards a connected cybersecurity defence system.

Malis Selamat, General Manager, Greater China, Sophos

He mentioned that Sophos Fusion is a breakthrough product that integrates multiple security elements, including endpoint, firewall, email and cloud, into a single architecture, thereby enhancing overall defence capability.

The Core Role of Identity Security

Discussing the position of identity security within an overall cybersecurity strategy, Malis Selamat stressed that identity security should be placed at the core. He noted that if user accounts and service accounts are not properly managed, they can become an entry point for hackers.

What makes identity attacks dangerous is that, on the surface, they often look normal.

Malis Selamat, General Manager, Greater China, Sophos

He added that 67% of organisations hit by ransomware attacks said identity breach was their most severe attack, highlighting that enterprises must build robust identity security defences when guarding against ransomware.

The Double-Edged Impact of AI Technology

With the rapid development of AI technology, Malis Selamat pointed out that Sophos is also adapting its products to counter emerging identity threats. He noted that AI can not only help hackers craft more convincing phishing content, but enterprises are also gradually adopting AI agents and automation tools to strengthen their security protection.

Sophos uses AI to enhance prevention, detection, investigation and response capabilities.

Malis Selamat, General Manager, Greater China, Sophos

He emphasised that Sophos Fusion's design integrates various security control points, allowing suspicious signals to be identified and acted upon more quickly, which is crucial for identifying potential identity threats.

The Impact of Identity Security Incidents on Enterprise Trust

Malis Selamat further pointed out that identity security incidents rapidly erode consumer trust, as they directly affect customers' access to accounts and data. He warned enterprises that if they cannot safeguard these access privileges, they will face a crisis of confidence.

To reduce risk, enterprises should strengthen identity verification, adopt conditional access, and use passkeys where appropriate.

Malis Selamat, General Manager, Greater China, Sophos

He advised that when an incident occurs, enterprises should communicate clearly with customers, helping them understand the situation and the enterprise's response measures, in order to preserve customer confidence.

Looking Ahead: The Future of Identity Security

Looking ahead, Malis Selamat believes identity control will become the main battleground of cybersecurity, and enterprises must comprehensively inventory their existing identities and access privileges while implementing the principle of least privilege. He stressed that identity security, ransomware defence and AI protection will become increasingly inseparable.

Identity control will become the main battleground of cybersecurity.

Malis Selamat, General Manager, Greater China, Sophos

As the identity security challenges facing enterprises continue to grow, Malis Selamat's insights undoubtedly provide valuable guidance for enterprises' future security strategies.