Organisations across Asia are embracing agentic AI, but they are also struggling with identity resilience, AI governance, and cyber recovery readiness gaps, according to Commvault’s ‘The State of Data Resilience Asia 2026” report.
According to the report, nearly all organisations in Asia plan to increase AI investment in 2026, with over one-third already testing or deploying agentic AI, yet resilience gaps continue to expose them to operational risks that could threaten business continuity.
“Asia’s AI ambition is undeniable,” said Martin Creighan, vice president, Asia Pacific, Commvault. “But as autonomous systems become part of how organisations operate, resilience can no longer sit on the sidelines. Organisations need a new posture entirely, one where recovery isn’t a backup plan, but how the modern business runs.”
Resilience and governance gap
The report found that the number of non-human identities accessing critical systems continues to grow, outnumbering human identities by as much as 82-to-1 globally.
The majority (73%) of organisations have incorporated human identities into cyber resilience planning, but only 34% have extended those strategies to non-human identities.
“AI is collapsing the gap between exposure and impact,” commented Gareth Russell, Field CTO, Security, Asia Pacific, Commvault. “When attack surfaces can be mapped overnight, and vulnerabilities emerge faster than organisations can respond, the question isn’t whether organisations get hit. It’s whether they can continue operating when they do.”
Conducted by Omdia, surveyed more than 1,200 organisations across Singapore, Indonesia, Hong Kong, Korea, Malaysia, Thailand, Vietnam, and the Philippines.
