Why this matters
In most organisations non-human identities (service accounts, app registrations, API keys, pipelines and now AI agents) outnumber people many times over, yet they rarely get the joiner-mover-leaver discipline humans get.
They don't use MFA, their secrets rarely rotate, nobody owns them, and they often hold more privilege than any admin. That is the gap NDGM was built to close.