{"id":1369,"date":"2026-09-26T17:14:41","date_gmt":"2026-09-26T15:14:41","guid":{"rendered":"https:\/\/wertfels.com\/herausforderungen\/unequal-rules-non-human-identities\/"},"modified":"2026-09-26T17:14:41","modified_gmt":"2026-09-26T15:14:41","slug":"unequal-rules-non-human-identities","status":"publish","type":"challenges","link":"https:\/\/wertfels.com\/en\/herausforderungen\/unequal-rules-non-human-identities\/","title":{"rendered":"Unequal rules for non-human identities"},"content":{"rendered":"    <section id=\"block_86b264e85e42e65de64a9c99c1fd4d3a\"\n             class=\"hero-services is-hero\"             data-section>\n\n        <figure class=\"hero-services__bg m-cover\" aria-hidden=\"true\">\n            <img decoding=\"async\" width=\"2880\" height=\"1612\" src=\"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/videoframe_0-3.webp\" class=\"skip-lazy\" alt=\"Abstract blue mountain background\" loading=\"eager\" fetchpriority=\"high\" srcset=\"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/videoframe_0-3-1920x1075.webp 1920w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/videoframe_0-3-1440x806.webp 1440w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/videoframe_0-3-1280x716.webp 1280w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/videoframe_0-3-767x429.webp 767w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/videoframe_0-3-300x168.webp 300w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/videoframe_0-3.webp 2880w\" sizes=\"(max-width: 2880px) 100vw, 2880px\" title=\"videoframe_0-3\" \/>                            <video data-src=\"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Main-container_3.mp4\" data-autoplay muted data-loop playsinline><\/video>\n                    <\/figure>\n\n        <div class=\"hero-services__inner container\">\n\n            <div class=\"hero-services__content\">\n                                    <p class=\"hero-services__tag title-tag\">The challenge<\/p>\n                \n                                    <h1 class=\"hero-services__title h-52 h-38-m\"><mark>Unequal rules<\/mark> for non\u2011human identities<\/h1>\n                \n                                    <div class=\"hero-services__text txt-16 txt-16-m\">\n                        <p>The DORA RTS covers service accounts, technical users and AI agents in more places than many institutions assume. Only one obligation applies to employees alone, and that is exactly where audit discussions begin.<\/p>\n                    <\/div>\n                \n                                    <div class=\"hero-services__actions\">    <a href=\"#contact\" class=\"btn btn--arrow\" title=\"Book an initial call\" target=\"_self\">\r\n        Book an initial call    <\/a>\r\n    <\/div>                            <\/div>\n        <\/div>\n    <\/section>\n\n\n    <section id=\"block_18fc7a23665eb35b95580588b3a5b558\"\n             class=\"features-problem-cards section\"             data-section data-theme=\"light\">\n\n        <div class=\"features-problem-cards__inner container\">\n\n            <div class=\"features-problem-cards__header section-header\">\n                                    <p class=\"features-problem-cards__tag title-tag\">The challenge<\/p>\n                \n                <div class=\"features-problem-cards__head-row section-header__row\">\n                                            <h2 class=\"features-problem-cards__title section-header__title h-40 h-32-m\">Where unequal rules become a problem<\/h2>\n                                    <\/div>\n            <\/div>\n\n                            <ul class=\"features-problem-cards__list\">\n                                            <li class=\"features-problem-cards__item\">\n                                                            <figure class=\"features-problem-cards__item-icon m-contain\">\n                                    <img decoding=\"async\" width=\"20\" height=\"20\" src=\"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/User-Icon-1.svg\" class=\"attachment-full size-full\" alt=\"\" loading=\"lazy\" srcset=\"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/User-Icon-1.svg 1920w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/User-Icon-1.svg 1440w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/User-Icon-1.svg 1280w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/User-Icon-1.svg 767w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/User-Icon-1.svg 300w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/User-Icon-1.svg 20w\" sizes=\"auto, (max-width: 20px) 100vw, 20px\" title=\"User Icon\" \/>                                <\/figure>\n                            \n                            <div class=\"features-problem-cards__item-content\">\n                                                                    <h3 class=\"features-problem-cards__item-title h-22 h-20-m\">Shared service accounts<\/h3>\n                                \n                                                                    <div class=\"features-problem-cards__item-text txt-14\">\n                                        <p>An account used by three teams does not breach the unique user account requirement. That requirement only applies to employees.<\/p>\n                                    <\/div>\n                                                            <\/div>\n                        <\/li>\n                                            <li class=\"features-problem-cards__item\">\n                                                            <figure class=\"features-problem-cards__item-icon m-contain\">\n                                    <img decoding=\"async\" width=\"20\" height=\"20\" src=\"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-6.svg\" class=\"attachment-full size-full\" alt=\"\" loading=\"lazy\" srcset=\"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-6.svg 1920w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-6.svg 1440w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-6.svg 1280w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-6.svg 767w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-6.svg 300w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-6.svg 20w\" sizes=\"auto, (max-width: 20px) 100vw, 20px\" title=\"Icon (6)\" \/>                                <\/figure>\n                            \n                            <div class=\"features-problem-cards__item-content\">\n                                                                    <h3 class=\"features-problem-cards__item-title h-22 h-20-m\">No accountability<\/h3>\n                                \n                                                                    <div class=\"features-problem-cards__item-text txt-14\">\n                                        <p>If the log cannot tell apart the actions of a shared account, the accountability required by Article 21(c) is missing.<\/p>\n                                    <\/div>\n                                                            <\/div>\n                        <\/li>\n                                            <li class=\"features-problem-cards__item\">\n                                                            <figure class=\"features-problem-cards__item-icon m-contain\">\n                                    <img decoding=\"async\" width=\"20\" height=\"20\" src=\"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/search-03-1.svg\" class=\"attachment-full size-full\" alt=\"\" loading=\"lazy\" srcset=\"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/search-03-1.svg 1920w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/search-03-1.svg 1440w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/search-03-1.svg 1280w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/search-03-1.svg 767w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/search-03-1.svg 300w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/search-03-1.svg 20w\" sizes=\"auto, (max-width: 20px) 100vw, 20px\" title=\"search 03\" \/>                                <\/figure>\n                            \n                            <div class=\"features-problem-cards__item-content\">\n                                                                    <h3 class=\"features-problem-cards__item-title h-22 h-20-m\">No access reviews<\/h3>\n                                \n                                                                    <div class=\"features-problem-cards__item-text txt-14\">\n                                        <p>Technical accounts are often left out of access reviews because they are not people. The regulation gives no grounds for this.<\/p>\n                                    <\/div>\n                                                            <\/div>\n                        <\/li>\n                                            <li class=\"features-problem-cards__item\">\n                                                            <figure class=\"features-problem-cards__item-icon m-contain\">\n                                    <img decoding=\"async\" width=\"20\" height=\"20\" src=\"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-7.svg\" class=\"attachment-full size-full\" alt=\"\" loading=\"lazy\" srcset=\"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-7.svg 1920w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-7.svg 1440w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-7.svg 1280w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-7.svg 767w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-7.svg 300w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-7.svg 20w\" sizes=\"auto, (max-width: 20px) 100vw, 20px\" title=\"Icon (7)\" \/>                                <\/figure>\n                            \n                            <div class=\"features-problem-cards__item-content\">\n                                                                    <h3 class=\"features-problem-cards__item-title h-22 h-20-m\">Not a legal term<\/h3>\n                                \n                                                                    <div class=\"features-problem-cards__item-text txt-14\">\n                                        <p>Service account, technical user and non-human identity do not appear in the regulation. BAIT and VAIT, which covered technical users, no longer apply under DORA.<\/p>\n                                    <\/div>\n                                                            <\/div>\n                        <\/li>\n                                    <\/ul>\n            \n        <\/div>\n    <\/section>\n\n\n    <section id=\"block_b7cab98de8d91eeb32ed6f7103241ffd\"\n             class=\"content-comparison section\"             data-section data-theme=\"light\">\n\n        <div class=\"content-comparison__inner container\">\n\n                            <ul class=\"content-comparison__list\">\n                                            <li class=\"content-comparison__item\">\n                                                            <div class=\"content-comparison__tag title-tag\">Impact<\/div>\n                            \n                                                            <h2 class=\"content-comparison__title h-40 h-32-m\">A gap in the wording<\/h2>\n                            \n                                                            <div class=\"content-comparison__text txt-16 txt-16-m\">\n                                    <p>Obligations for technical accounts follow from articles written in general terms. In the audit, both sides argue over this wording.<\/p>\n                                <\/div>\n                            \n                                                            <ul class=\"content-comparison__points\">\n                                                                            <li class=\"content-comparison__point txt-16 txt-16-m\">Shared accounts without a named owner<\/li>\n                                                                            <li class=\"content-comparison__point txt-16 txt-16-m\">Actions not traceable to a user<\/li>\n                                                                            <li class=\"content-comparison__point txt-16 txt-16-m\">Access remains after the purpose is gone<\/li>\n                                                                            <li class=\"content-comparison__point txt-16 txt-16-m\">Technical accounts missing from access reviews<\/li>\n                                                                            <li class=\"content-comparison__point txt-16 txt-16-m\">No answer when the auditor asks<\/li>\n                                                                    <\/ul>\n                                                    <\/li>\n                                            <li class=\"content-comparison__item\">\n                                                            <div class=\"content-comparison__tag title-tag\">Our approach<\/div>\n                            \n                                                            <h2 class=\"content-comparison__title h-40 h-32-m\">Same rules for every account<\/h2>\n                            \n                                                            <div class=\"content-comparison__text txt-16 txt-16-m\">\n                                    <p>Every non-human identity is treated the way the regulation requires for all accounts. We close the one gap ourselves: a dedicated account, a named owner and access reviews on the same cycle as for employees.<\/p>\n                                <\/div>\n                            \n                                                            <ul class=\"content-comparison__points\">\n                                                                            <li class=\"content-comparison__point txt-16 txt-16-m\">A dedicated account per non-human identity and per agent<\/li>\n                                                                            <li class=\"content-comparison__point txt-16 txt-16-m\">Owner under Article 21(e)(i)<\/li>\n                                                                            <li class=\"content-comparison__point txt-16 txt-16-m\">Lifecycle management for all accounts, automated where possible<\/li>\n                                                                            <li class=\"content-comparison__point txt-16 txt-16-m\">Access reviews annually, every six months for critical functions<\/li>\n                                                                            <li class=\"content-comparison__point txt-16 txt-16-m\">Logs with synchronized timestamps<\/li>\n                                                                    <\/ul>\n                                                    <\/li>\n                                    <\/ul>\n            \n        <\/div>\n    <\/section>\n\n\n    <section id=\"block_a41d9797de293ba8f4bc959230da0b25\"\n             class=\"features-outcome-cards section\"             data-section data-theme=\"dark\">\n\n        <div class=\"features-outcome-cards__inner container\">\n\n            <div class=\"features-outcome-cards__header section-header\">\n                                    <p class=\"features-outcome-cards__tag title-tag\">Results<\/p>\n                \n                <div class=\"features-outcome-cards__head-row section-header__row\">\n                                            <h2 class=\"features-outcome-cards__title section-header__title h-40 h-32-m\">What the same rules for all accounts achieve<\/h2>\n                                    <\/div>\n            <\/div>\n\n                            <ul class=\"features-outcome-cards__list\">\n                                            <li class=\"features-outcome-cards__item\">\n                                                            <figure class=\"features-outcome-cards__item-icon m-contain\">\n                                    <img decoding=\"async\" width=\"20\" height=\"20\" src=\"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-8.svg\" class=\"attachment-full size-full\" alt=\"\" loading=\"lazy\" srcset=\"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-8.svg 1920w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-8.svg 1440w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-8.svg 1280w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-8.svg 767w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-8.svg 300w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-8.svg 20w\" sizes=\"auto, (max-width: 20px) 100vw, 20px\" title=\"Icon (8)\" \/>                                <\/figure>\n                            \n                            <div class=\"features-outcome-cards__item-content\">\n                                                                    <h3 class=\"features-outcome-cards__item-title h-24 h-22-m\">Clear legal basis<\/h3>\n                                \n                                                                    <div class=\"features-outcome-cards__item-text txt-16 txt-16-m\">\n                                        <p>For every requirement on technical accounts, the provision in the DORA RTS is named. The auditor sees what each control is based on.<\/p>\n                                    <\/div>\n                                                            <\/div>\n                        <\/li>\n                                            <li class=\"features-outcome-cards__item\">\n                                                            <figure class=\"features-outcome-cards__item-icon m-contain\">\n                                    <img decoding=\"async\" width=\"20\" height=\"20\" src=\"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/ph_gear-fine-fill.svg\" class=\"attachment-full size-full\" alt=\"\" loading=\"lazy\" srcset=\"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/ph_gear-fine-fill.svg 1920w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/ph_gear-fine-fill.svg 1440w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/ph_gear-fine-fill.svg 1280w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/ph_gear-fine-fill.svg 767w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/ph_gear-fine-fill.svg 300w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/ph_gear-fine-fill.svg 20w\" sizes=\"auto, (max-width: 20px) 100vw, 20px\" title=\"ph_gear-fine-fill\" \/>                                <\/figure>\n                            \n                            <div class=\"features-outcome-cards__item-content\">\n                                                                    <h3 class=\"features-outcome-cards__item-title h-24 h-22-m\">Traceable actions<\/h3>\n                                \n                                                                    <div class=\"features-outcome-cards__item-text txt-16 txt-16-m\">\n                                        <p>Every action can be traced to an account and therefore to an owner, as Article 21(c) requires.<\/p>\n                                    <\/div>\n                                                            <\/div>\n                        <\/li>\n                                            <li class=\"features-outcome-cards__item\">\n                                                            <figure class=\"features-outcome-cards__item-icon m-contain\">\n                                    <img decoding=\"async\" width=\"20\" height=\"20\" src=\"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-9.svg\" class=\"attachment-full size-full\" alt=\"\" loading=\"lazy\" srcset=\"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-9.svg 1920w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-9.svg 1440w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-9.svg 1280w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-9.svg 767w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-9.svg 300w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-9.svg 20w\" sizes=\"auto, (max-width: 20px) 100vw, 20px\" title=\"Icon (9)\" \/>                                <\/figure>\n                            \n                            <div class=\"features-outcome-cards__item-content\">\n                                                                    <h3 class=\"features-outcome-cards__item-title h-24 h-22-m\">Reviews on schedule<\/h3>\n                                \n                                                                    <div class=\"features-outcome-cards__item-text txt-16 txt-16-m\">\n                                        <p>Technical accounts go through the same access reviews as employee accounts, annually and every six months for critical functions.<\/p>\n                                    <\/div>\n                                                            <\/div>\n                        <\/li>\n                                            <li class=\"features-outcome-cards__item\">\n                                                            <figure class=\"features-outcome-cards__item-icon m-contain\">\n                                    <img decoding=\"async\" width=\"20\" height=\"20\" src=\"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-10.svg\" class=\"attachment-full size-full\" alt=\"\" loading=\"lazy\" srcset=\"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-10.svg 1920w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-10.svg 1440w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-10.svg 1280w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-10.svg 767w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-10.svg 300w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-10.svg 20w\" sizes=\"auto, (max-width: 20px) 100vw, 20px\" title=\"Icon (10)\" \/>                                <\/figure>\n                            \n                            <div class=\"features-outcome-cards__item-content\">\n                                                                    <h3 class=\"features-outcome-cards__item-title h-24 h-22-m\">End-to-end traceability<\/h3>\n                                \n                                                                    <div class=\"features-outcome-cards__item-text txt-16 txt-16-m\">\n                                        <p>Synchronized timestamps under Article 12 make a chain of actions across several systems traceable.<\/p>\n                                    <\/div>\n                                                            <\/div>\n                        <\/li>\n                                    <\/ul>\n            \n        <\/div>\n    <\/section>\n\n\n    <section id=\"block_326b661dbec692a35403675e754e8b20\"\n             class=\"steps-process section\"             data-section data-theme=\"light\">\n\n                    <figure class=\"steps-process__image m-contain\">\n                <img decoding=\"async\" width=\"455\" height=\"339\" src=\"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Layer_1.svg\" class=\"attachment-full size-full\" alt=\"Abstract digital network icon\" loading=\"lazy\" srcset=\"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Layer_1.svg 1920w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Layer_1.svg 1440w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Layer_1.svg 1280w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Layer_1.svg 767w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Layer_1.svg 300w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Layer_1.svg 455w\" sizes=\"auto, (max-width: 455px) 100vw, 455px\" title=\"Layer_1\" \/>            <\/figure>\n        \n        <div class=\"steps-process__inner container\">\n\n            <div class=\"steps-process__header section-header\">\n                                    <p class=\"steps-process__tag title-tag\">Approach<\/p>\n                \n                <div class=\"steps-process__head-row section-header__row\">\n                                            <h2 class=\"steps-process__title section-header__title h-40 h-32-m\">From gap analysis to audit<\/h2>\n                    \n                                            <ol class=\"steps-process__list\">\n                                                            <li class=\"steps-process__item\">\n                                    <div class=\"steps-process__item-header\">\n                                        <span class=\"steps-process__item-number\">01<\/span>\n                                                                                    <h3 class=\"steps-process__item-title h-24 h-22-m\">Inventory<\/h3>\n                                                                            <\/div>\n\n                                                                            <div class=\"steps-process__item-text txt-16\">\n                                            <p>An inventory of all service accounts, technical users and AI agents with purpose, target systems and last use.<\/p>\n                                        <\/div>\n                                                                    <\/li>\n                                                            <li class=\"steps-process__item\">\n                                    <div class=\"steps-process__item-header\">\n                                        <span class=\"steps-process__item-number\">02<\/span>\n                                                                                    <h3 class=\"steps-process__item-title h-24 h-22-m\">Map to the regulation<\/h3>\n                                                                            <\/div>\n\n                                                                            <div class=\"steps-process__item-text txt-16\">\n                                            <p>For each account type, we check which articles of the DORA RTS apply and where gaps exist today.<\/p>\n                                        <\/div>\n                                                                    <\/li>\n                                                            <li class=\"steps-process__item\">\n                                    <div class=\"steps-process__item-header\">\n                                        <span class=\"steps-process__item-number\">03<\/span>\n                                                                                    <h3 class=\"steps-process__item-title h-24 h-22-m\">Split shared accounts<\/h3>\n                                                                            <\/div>\n\n                                                                            <div class=\"steps-process__item-text txt-16\">\n                                            <p>Shared accounts are split until every action can be traced to one account and one owner.<\/p>\n                                        <\/div>\n                                                                    <\/li>\n                                                            <li class=\"steps-process__item\">\n                                    <div class=\"steps-process__item-header\">\n                                        <span class=\"steps-process__item-number\">04<\/span>\n                                                                                    <h3 class=\"steps-process__item-title h-24 h-22-m\">Link to access reviews<\/h3>\n                                                                            <\/div>\n\n                                                                            <div class=\"steps-process__item-text txt-16\">\n                                            <p>Technical accounts join the same review cycle as employee accounts, with revocation as soon as the purpose is gone.<\/p>\n                                        <\/div>\n                                                                    <\/li>\n                                                            <li class=\"steps-process__item\">\n                                    <div class=\"steps-process__item-header\">\n                                        <span class=\"steps-process__item-number\">05<\/span>\n                                                                                    <h3 class=\"steps-process__item-title h-24 h-22-m\">Audit evidence<\/h3>\n                                                                            <\/div>\n\n                                                                            <div class=\"steps-process__item-text txt-16\">\n                                            <p>An overview per requirement with the provision and the control in place.<\/p>\n                                        <\/div>\n                                                                    <\/li>\n                                                    <\/ol>\n                                    <\/div>\n            <\/div>\n\n        <\/div>\n    <\/section>\n\n\n    <section id=\"contact\"\n             class=\"cta-contact-form section\"             data-section data-theme=\"light\">\n\n        <div class=\"cta-contact-form__inner container\">\n            <div class=\"cta-contact-form__panel\">\n                                    <figure class=\"cta-contact-form__bg m-cover\">\n                        <img decoding=\"async\" width=\"2720\" height=\"1058\" src=\"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/tg_image_195989443-1-1.png\" class=\"attachment-full size-full\" alt=\"\" loading=\"lazy\" srcset=\"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/tg_image_195989443-1-1-1920x747.png 1920w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/tg_image_195989443-1-1-1440x560.png 1440w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/tg_image_195989443-1-1-1280x498.png 1280w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/tg_image_195989443-1-1-767x298.png 767w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/tg_image_195989443-1-1-300x117.png 300w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/tg_image_195989443-1-1.png 2720w\" sizes=\"auto, (max-width: 2720px) 100vw, 2720px\" title=\"tg_image_195989443 1\" \/>                    <\/figure>\n                \n                <div class=\"cta-contact-form__header\">\n                                            <p class=\"cta-contact-form__tag title-tag\">Ready for the next step<\/p>\n                    \n                                            <div class=\"cta-contact-form__text-group\">\n                                                            <h2 class=\"cta-contact-form__title h-40 h-32-m\">Talk to us about your technical accounts<\/h2>\n                            \n                                                            <div class=\"cta-contact-form__text txt-16 txt-16-m\">Tell us briefly about your project. We will get back to you and discuss where your IAM stands today.<\/div>\n                                                    <\/div>\n                                    <\/div>\n\n                                    <div class=\"cta-contact-form__form-wrap cf7\">\n                        \n<div class=\"wpcf7 no-js\" id=\"wpcf7-f1445-o1\" lang=\"en-US\" dir=\"ltr\" data-wpcf7-id=\"1445\">\n<div class=\"screen-reader-response\"><p role=\"status\" aria-live=\"polite\" aria-atomic=\"true\"><\/p> <ul><\/ul><\/div>\n<form action=\"\/en\/wp-json\/wp\/v2\/challenges\/1369#wpcf7-f1445-o1\" method=\"post\" class=\"wpcf7-form init\" aria-label=\"Contact form\" novalidate=\"novalidate\" data-status=\"init\">\n<fieldset class=\"hidden-fields-container\"><input type=\"hidden\" name=\"_wpcf7\" value=\"1445\" \/><input type=\"hidden\" name=\"_wpcf7_version\" value=\"6.2.3\" \/><input type=\"hidden\" name=\"_wpcf7_locale\" value=\"en_US\" \/><input type=\"hidden\" name=\"_wpcf7_unit_tag\" value=\"wpcf7-f1445-o1\" \/><input type=\"hidden\" name=\"_wpcf7_container_post\" value=\"0\" \/><input type=\"hidden\" name=\"_wpcf7_posted_data_hash\" value=\"\" \/>\n<\/fieldset>\n<label class=\"w-50\">\n<span class=\"label\">* Name<\/span>\n<span class=\"wpcf7-form-control-wrap\" data-name=\"your-name\"><input size=\"40\" maxlength=\"400\" class=\"wpcf7-form-control wpcf7-text wpcf7-validates-as-required\" aria-required=\"true\" aria-invalid=\"false\" placeholder=\"Enter your name\" value=\"\" type=\"text\" name=\"your-name\" \/><\/span>\n<\/label>\n\n<label class=\"w-50\">\n<span class=\"label\">* Email<\/span>\n<span class=\"wpcf7-form-control-wrap\" data-name=\"your-email\"><input size=\"40\" maxlength=\"400\" class=\"wpcf7-form-control wpcf7-email wpcf7-validates-as-required wpcf7-text wpcf7-validates-as-email\" aria-required=\"true\" aria-invalid=\"false\" placeholder=\"Enter your email address\" value=\"\" type=\"email\" name=\"your-email\" \/><\/span>\n<\/label>\n\n<label class=\"w-50\">\n<span class=\"label\">* Company name<\/span>\n<span class=\"wpcf7-form-control-wrap\" data-name=\"your-company\"><input size=\"40\" maxlength=\"400\" class=\"wpcf7-form-control wpcf7-text wpcf7-validates-as-required\" aria-required=\"true\" aria-invalid=\"false\" placeholder=\"Enter your company name\" value=\"\" type=\"text\" name=\"your-company\" \/><\/span>\n<\/label>\n\n<label class=\"w-50\">\n<span class=\"label\">* Industry<\/span>\n<span class=\"wpcf7-form-control-wrap\" data-name=\"your-industry\"><select class=\"wpcf7-form-control wpcf7-select wpcf7-validates-as-required\" aria-required=\"true\" aria-invalid=\"false\" name=\"your-industry\"><option value=\"\">Select industry<\/option><option value=\"Banking\">Banking<\/option><option value=\"Insurance\">Insurance<\/option><option value=\"Financial services\">Financial services<\/option><option value=\"Automotive\">Automotive<\/option><option value=\"Public sector\">Public sector<\/option><option value=\"Other\">Other<\/option><\/select><\/span>\n<\/label>\n\n<label>\n<span class=\"label\">Message<\/span>\n<span class=\"wpcf7-form-control-wrap\" data-name=\"your-message\"><textarea cols=\"40\" rows=\"10\" maxlength=\"2000\" class=\"wpcf7-form-control wpcf7-textarea\" aria-invalid=\"false\" placeholder=\"Your message\" name=\"your-message\"><\/textarea><\/span>\n<\/label>\n<div class=\"wpcf7-turnstile cf-turnstile\" data-appearance=\"interaction-only\" data-theme=\"light\" data-size=\"flexible\" data-before-interactive-callback=\"wfTsZeigen\" data-sitekey=\"0x4AAAAAAE0D1HVD3x9dyaaX\" data-response-field-name=\"_wpcf7_turnstile_response\"><\/div>\n<button class=\"wpcf7-form-control wpcf7-submit has-spinner btn btn--arrow\" type=\"submit\" value=\"Book an initial call\">Book an initial call<\/button><div class=\"wpcf7-response-output\" aria-hidden=\"true\"><\/div>\n<\/form>\n<\/div>\n                        <div class=\"cf7-thanks\">\n                            <span class=\"cf7-thanks__icon\" aria-hidden=\"true\"><\/span>\n\n                                                            <p class=\"cf7-thanks__title h-28 h-24-m\">Thank you for your inquiry.<\/p>\n                            \n                                                            <div class=\"cf7-thanks__text txt-16\">\n                                    <p>Your message has been sent successfully. Our team will get back to you shortly.<\/p>\n                                <\/div>\n                                                    <\/div>\n                    <\/div>\n                            <\/div>\n        <\/div>\n    <\/section>\n","protected":false},"excerpt":{"rendered":"<p>Lifecycle, logging and access reviews apply to all accounts. DORA requires one account per identity only for people.<\/p>\n","protected":false},"featured_media":961,"template":"","class_list":["post-1369","challenges","type-challenges","status-publish","has-post-thumbnail","hentry"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Unequal rules for non-human identities | WertFels<\/title>\n<meta name=\"description\" content=\"DORA also covers service accounts and AI agents. Only the unique account per identity applies to employees alone. What this means for your audit.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/wertfels.com\/en\/herausforderungen\/unequal-rules-non-human-identities\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Unequal rules for non-human identities | WertFels\" \/>\n<meta property=\"og:description\" content=\"DORA also covers service accounts and AI agents. Only the unique account per identity applies to employees alone. What this means for your audit.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/wertfels.com\/en\/herausforderungen\/unequal-rules-non-human-identities\/\" \/>\n<meta property=\"og:site_name\" content=\"WertFels\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/wertfels.com\\\/en\\\/herausforderungen\\\/unequal-rules-non-human-identities\\\/\",\"url\":\"https:\\\/\\\/wertfels.com\\\/en\\\/herausforderungen\\\/unequal-rules-non-human-identities\\\/\",\"name\":\"Unequal rules for non-human identities | WertFels\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/wertfels.com\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/wertfels.com\\\/en\\\/herausforderungen\\\/unequal-rules-non-human-identities\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/wertfels.com\\\/en\\\/herausforderungen\\\/unequal-rules-non-human-identities\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/wertfels.com\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/whitepaper-ungleiche-regeln.jpg\",\"datePublished\":\"2026-09-26T15:14:41+00:00\",\"description\":\"DORA also covers service accounts and AI agents. Only the unique account per identity applies to employees alone. What this means for your audit.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/wertfels.com\\\/en\\\/herausforderungen\\\/unequal-rules-non-human-identities\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/wertfels.com\\\/en\\\/herausforderungen\\\/unequal-rules-non-human-identities\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/wertfels.com\\\/en\\\/herausforderungen\\\/unequal-rules-non-human-identities\\\/#primaryimage\",\"url\":\"https:\\\/\\\/wertfels.com\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/whitepaper-ungleiche-regeln.jpg\",\"contentUrl\":\"https:\\\/\\\/wertfels.com\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/whitepaper-ungleiche-regeln.jpg\",\"width\":2048,\"height\":1080},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/wertfels.com\\\/en\\\/herausforderungen\\\/unequal-rules-non-human-identities\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/wertfels.com\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Unequal rules for non-human identities\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/wertfels.com\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/wertfels.com\\\/en\\\/\",\"name\":\"WertFels\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/wertfels.com\\\/en\\\/#organization\"},\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/wertfels.com\\\/en\\\/#organization\",\"name\":\"WertFels GmbH\",\"alternateName\":\"WertFels\",\"url\":\"https:\\\/\\\/wertfels.com\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/wertfels.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/wertfels.com\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/wertfels-logo-696.png\",\"contentUrl\":\"https:\\\/\\\/wertfels.com\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/wertfels-logo-696.png\",\"width\":696,\"height\":696,\"caption\":\"WertFels GmbH\"},\"image\":{\"@id\":\"https:\\\/\\\/wertfels.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/company\\\/wertfels-gmbh\"],\"legalName\":\"WertFels GmbH\",\"description\":\"Beratungshaus f\u00fcr Identity und Access Management. Schwerpunkt sind Banken, Versicherer und weitere regulierte Branchen, dazu Non-Human Identities und agentische KI.\",\"email\":\"info@wertfels.com\",\"telephone\":\"+49 89 244102321\",\"vatID\":\"DE328699375\",\"foundingDate\":\"2020-01-20\",\"address\":{\"@type\":\"PostalAddress\",\"streetAddress\":\"Schellingstra\u00dfe 109a\",\"postalCode\":\"80798\",\"addressLocality\":\"M\u00fcnchen\",\"addressCountry\":\"DE\"},\"identifier\":{\"@type\":\"PropertyValue\",\"name\":\"Handelsregister\",\"value\":\"HRB 31625, Amtsgericht Wiesbaden\"},\"areaServed\":[{\"@type\":\"Country\",\"name\":\"Deutschland\"},{\"@type\":\"Country\",\"name\":\"\u00d6sterreich\"},{\"@type\":\"Country\",\"name\":\"Schweiz\"}],\"knowsAbout\":[\"Identity und Access Management\",\"Identity Governance und Administration\",\"Privileged Access Management\",\"Non-Human Identities\",\"Agentische KI\",\"DORA\",\"NIS2\",\"BAIT und VAIT\"],\"contactPoint\":{\"@type\":\"ContactPoint\",\"contactType\":\"Vertrieb\",\"telephone\":\"+49 89 244102321\",\"email\":\"info@wertfels.com\",\"availableLanguage\":[\"de\",\"en\"],\"areaServed\":[\"DE\",\"AT\",\"CH\"]}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Unequal rules for non-human identities | WertFels","description":"DORA also covers service accounts and AI agents. Only the unique account per identity applies to employees alone. What this means for your audit.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/wertfels.com\/en\/herausforderungen\/unequal-rules-non-human-identities\/","og_locale":"en_US","og_type":"article","og_title":"Unequal rules for non-human identities | WertFels","og_description":"DORA also covers service accounts and AI agents. Only the unique account per identity applies to employees alone. What this means for your audit.","og_url":"https:\/\/wertfels.com\/en\/herausforderungen\/unequal-rules-non-human-identities\/","og_site_name":"WertFels","twitter_card":"summary_large_image","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/wertfels.com\/en\/herausforderungen\/unequal-rules-non-human-identities\/","url":"https:\/\/wertfels.com\/en\/herausforderungen\/unequal-rules-non-human-identities\/","name":"Unequal rules for non-human identities | WertFels","isPartOf":{"@id":"https:\/\/wertfels.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/wertfels.com\/en\/herausforderungen\/unequal-rules-non-human-identities\/#primaryimage"},"image":{"@id":"https:\/\/wertfels.com\/en\/herausforderungen\/unequal-rules-non-human-identities\/#primaryimage"},"thumbnailUrl":"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/09\/whitepaper-ungleiche-regeln.jpg","datePublished":"2026-09-26T15:14:41+00:00","description":"DORA also covers service accounts and AI agents. Only the unique account per identity applies to employees alone. What this means for your audit.","breadcrumb":{"@id":"https:\/\/wertfels.com\/en\/herausforderungen\/unequal-rules-non-human-identities\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/wertfels.com\/en\/herausforderungen\/unequal-rules-non-human-identities\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/wertfels.com\/en\/herausforderungen\/unequal-rules-non-human-identities\/#primaryimage","url":"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/09\/whitepaper-ungleiche-regeln.jpg","contentUrl":"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/09\/whitepaper-ungleiche-regeln.jpg","width":2048,"height":1080},{"@type":"BreadcrumbList","@id":"https:\/\/wertfels.com\/en\/herausforderungen\/unequal-rules-non-human-identities\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/wertfels.com\/en\/"},{"@type":"ListItem","position":2,"name":"Unequal rules for non-human identities"}]},{"@type":"WebSite","@id":"https:\/\/wertfels.com\/en\/#website","url":"https:\/\/wertfels.com\/en\/","name":"WertFels","description":"","publisher":{"@id":"https:\/\/wertfels.com\/en\/#organization"},"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/wertfels.com\/en\/#organization","name":"WertFels GmbH","alternateName":"WertFels","url":"https:\/\/wertfels.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/wertfels.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/09\/wertfels-logo-696.png","contentUrl":"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/09\/wertfels-logo-696.png","width":696,"height":696,"caption":"WertFels GmbH"},"image":{"@id":"https:\/\/wertfels.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/wertfels-gmbh"],"legalName":"WertFels GmbH","description":"Beratungshaus f\u00fcr Identity und Access Management. Schwerpunkt sind Banken, Versicherer und weitere regulierte Branchen, dazu Non-Human Identities und agentische KI.","email":"info@wertfels.com","telephone":"+49 89 244102321","vatID":"DE328699375","foundingDate":"2020-01-20","address":{"@type":"PostalAddress","streetAddress":"Schellingstra\u00dfe 109a","postalCode":"80798","addressLocality":"M\u00fcnchen","addressCountry":"DE"},"identifier":{"@type":"PropertyValue","name":"Handelsregister","value":"HRB 31625, Amtsgericht Wiesbaden"},"areaServed":[{"@type":"Country","name":"Deutschland"},{"@type":"Country","name":"\u00d6sterreich"},{"@type":"Country","name":"Schweiz"}],"knowsAbout":["Identity und Access Management","Identity Governance und Administration","Privileged Access Management","Non-Human Identities","Agentische KI","DORA","NIS2","BAIT und VAIT"],"contactPoint":{"@type":"ContactPoint","contactType":"Vertrieb","telephone":"+49 89 244102321","email":"info@wertfels.com","availableLanguage":["de","en"],"areaServed":["DE","AT","CH"]}}]}},"_links":{"self":[{"href":"https:\/\/wertfels.com\/en\/wp-json\/wp\/v2\/challenges\/1369","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wertfels.com\/en\/wp-json\/wp\/v2\/challenges"}],"about":[{"href":"https:\/\/wertfels.com\/en\/wp-json\/wp\/v2\/types\/challenges"}],"version-history":[{"count":0,"href":"https:\/\/wertfels.com\/en\/wp-json\/wp\/v2\/challenges\/1369\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/wertfels.com\/en\/wp-json\/wp\/v2\/media\/961"}],"wp:attachment":[{"href":"https:\/\/wertfels.com\/en\/wp-json\/wp\/v2\/media?parent=1369"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}