printer friendly version

Managing access for devices, bots, and systems

South African access control environments are becoming more complex. It is no longer only people who need identities; machines, IoT devices, service accounts, and even AI tools now require secure authentication. For technicians and installers, this represents a new frontier in access control.

Industry events such as Securex South Africa, co-located with A-OSH EXPO, Facilities Management Expo, Firexpo, and RE+ South Africa, taking place 2 to 4 June 2026 at Gallagher Convention Centre, offer a practical space to learn about these technologies. Many exhibitors now showcase systems designed to manage both human and machine identities.

“Added to the large variety of solutions showcased at Securex South Africa, visitors also benefit from the thought-provoking free-to-attend Securex Seminar Theatre sessions, and the live demonstrations of technology on the exhibitors’ stands,” says Mark Anderson, portfolio director at Montgomery Group Africa.

Why this matters for installers

As buildings become smarter and more automated, the number of connected devices grows rapidly. These devices include:

• Door controllers.

• CCTV cameras.

• Intercoms.

• IoT sensors.

• HVAC systems.

• Automation scripts.

• AI monitoring tools.

All these devices require authentication. If left unsecured, they become entry points for attackers. Default passwords, outdated firmware, and unused machine accounts remain common weaknesses in South African environments.

Machine identities growing faster than human users

Globally, machine identities now grow three to five times faster than human identities. South Africa follows the same pattern, driven by growing cloud adoption, digital transformation, and modern building technologies. Attackers increasingly target machine accounts because:

• They often have high privileges.

• They are rarely monitored.

• They are not rotated regularly.

• They are difficult to track across systems.

For technicians and installers, the challenge is ensuring that every device, script, or service account is properly governed.

Unified identity management: a practical approach

Newer IAM (Identity and Access Management) systems allow users to manage both human and machine identities in one place. This includes:

• Creating and revoking service accounts.

• Setting permissions for IoT devices.

• Managing API keys.

• Monitoring device behaviour.

• Applying least-privilege rules.

This unified approach reduces configuration errors and closes gaps that attackers rely on.

AI and identity: benefits and risks

Artificial intelligence brings new tools and new dangers. Benefits for installers and users:

• AI can detect strange behaviour (for example, a door controller making unexpected network requests).

• It can help identify compromised devices earlier.

• It provides behaviour analytics to support Zero Trust access control.

Risks to watch out for include:

• AI can be used to generate fake identities.

• Bots can attempt automated credential attacks.

• Deepfake voice or face attempts may target biometric systems.

Users should look for systems with:

• Liveness detection.

• Anomaly detection.

• Behavioural monitoring.

• Secure biometric template storage.

Why Securex and the co-located shows are useful

At Securex, installers can:

• Talk directly to specialists.

• Test real hardware.

• Compare IAM platforms.

• Learn how to secure IoT devices.

• Check how systems integrate with CCTV, alarms, and fire panels.

• See demos of AI risk detection.

Because A-OSH EXPO, Facilities Management Expo, Firexpo, and RE+ South Africa run alongside Securex South Africa, visitors can explore integrated solutions, not just standalone products.

Practical steps to take

To secure machine identities effectively:

1. Change all default device passwords immediately.

2. Use credential vaulting for API keys and service accounts.

3. Apply least privilege, giving each device only the access it needs.

4. Enable automatic firmware updates where possible.

5. Monitor device behaviour through logs or AI tools.

6. Use Zero Trust principles for both people and machines.

7. Remove old accounts linked to decommissioned equipment.

“These steps reduce risk, improve system stability, and increase customer trust. South Africa’s identity environment is developing fast. Installers who understand both human and machine identity risks will be better equipped to protect modern buildings, networks, and connected environments,” says Anderson.

Visit the Securex website at www.securex.co.za to find out more about Securex South Africa. Organisations wishing to exhibit at Securex South Africa 2026, can contact the Securex South Africa team on [email protected] or [email protected] to book a space or capitalise on a sponsorship opportunity.

For more information contact Montgomery Group Africa - Securex, www.securex.co.za

Share this article:

Further reading: