Identity as a Business Control: Ayan Roy on Risk, Governance & AI Strategy

Identity isn’t a tool. It’s a control layer for the entire business. In this episode of SaviTalk, Ayan Roy (EY) joins David Lee and Henrique Teixeira to unpack the real state of identity security—from governance failures to the impact of AI on enterprise risk. This conversation goes beyond theory into how identity actually operates inside large organizations—what breaks, what scales, and what leaders still misunderstand. In this episode, we cover: Why identity governance still fails at scale The gap between compliance and real security How AI is changing identity risk (and what’s overhyped) The rise of machine identities and complexity Why identity must become a business control layer About Ayan Roy: Ayan Roy is a Cybersecurity Competency Leader and Partner/Principal at EY, where he advises global enterprises on identity, governance, and risk transformation. CHAPTERS: 0:00 — Intro: Identity, Risk & Reality 1:45 — Meet Ayan Roy (EY) 4:10 — How Identity Became a Risk Problem 7:30 — Why Governance Still Breaks 11:05 — Identity vs Compliance Mindset 15:20 — Enterprise Reality: What Actually Scales 19:10 — Risk, Controls & Business Alignment 23:45 — Where AI Fits (and Where It Doesn’t) 28:30 — Data, Identity & Decision-Making 33:15 — The Rise of Machine Identities 38:40 — Organizational Challenges in Identity 43:20 — What CISOs Still Get Wrong 48:15 — The Future of Identity Security 52:30 — Closing Thoughts Hosts: David Lee Henrique Teixeira Subscribe to SaviTalk for more executive-level conversations on identity security.