Identity and Access Management...What identity and access management systems does your organization...

Summary Results | February 2019

Identity and Access Management


Copyright ©2017 Gatepoint Research. All rights reserved. This report is the sole property of Gatepoint Research and may not be used, reproduced or redistributed in any form including, but not limited to, print & digital form without express written consent of Gatepoint Research.

Survey Summary

▶ Between October 2018 and February 2019, Gatepoint Research invited selected

executives to participate in a survey themed Identity and Access Management.

▶ Candidates from the 2018 Americas Target Accounts were invited via email and 110

executives have participated to date.

▶ Management levels represented are predominantly IT and security senior decision

makers: 10% hold the title CxO, 10% are VPs, 37% are Directors, and 43% are

Managers.

▶ Survey participants represent firms from a wide variety of industries including business

and financial services, healthcare, media, manufacturing (primary, general, and high

tech), public administration, retail and wholesale trade, telecom services,

transportation, and utilities.

▶ Responders work for firms with a wide range of revenue levels:

▪ 76% work in Fortune 1000 companies with revenues over $1.5 billion;

▪ 8% work in Mid-Market or Large firms whose revenues are between $250 million

and $1.5 billion;

▪ 16% work in Small companies with less than $250 million in revenues.

▶ 100% of responders participated voluntarily; none were engaged using telemarketing.



Executive Overview

Who are you, and are you really who you say you are? Detecting authenticity has become

more complicated than ever. The need to capture, identify, and ultimately authenticate

users protects customers' and employees' identities from potential harm. What are

organizations doing to ensure the highest level of security?

This survey asks respondents to report:

▶ How are they currently performing against threats and attacks?

▶ What software are they using? Can it identify and authenticate users? Which types of users?

▶ How confident are they that their current system can continue protecting them against future hacking technology??

▶ What concerns them most about security threats to their organization?

▶ What features are most important when considering new identity and authentication software?



What percent of your job is dedicated to digital identity

security?

All but 16% of respondents are either influencers in their organization’s digital identity security, or are directly involved in the work.

9%

21%

29%

25%

16%

0% 5% 10% 15% 20% 25% 30% 35%

51% to 100%

26% to 50%

10% to 25%

I'm an influencer, but not directly involved

I'm not involved at all



What best describes your organization's efforts against

security attacks?

Most respondents (73%) feel their security protocols are competently thwarting security attacks, yet 27% of those say it’s at the expense of other business priorities. 15% wearily say it’s a constant battle, while the rest (12%) are just treading water.

46%

27%

15%

12%

0% 5% 10% 15% 20% 25% 30% 35% 40% 45% 50%

We stay a nose ahead

On top of it, but at the expense of other priorities

We're in The Hundred-Year War

We're treading water



What identity and access management systems does your

organization use?

A third of respondents report they use Okta identity and access management system, a 10-point edge over the next most popular, Ping. 16% use CA SSO or have a homegrown system, and 13% use Oracle Directory.

Okta

33%

Ping

23%

CA SSO (formerly

Siteminder)

16%

Homegrown

16%

Oracle Directory

12%



Which users can your identity management system

automatically recognize and authenticate?

While nearly half of respondents’ systems can automatically recognize and authenticate employees, and 25% can recognize and authenticate customers, a fourth of those surveyed require login protocol for both employees and customers.

48%

25%

25%

25%

0% 10% 20% 30% 40% 50% 60%

Employees

Customers

Both are automatically recognized and authenticated

Neither. Both require a login protocol.



Are you confident that your identity protection systems will continue to deter sophisticated hacking efforts? (Rate 1 to 5, 1 = somewhat confident, 5 = completely confident our technology will stay ahead)

Just 22% of respondents have the highest confidence in their technology’s ability to stay ahead of sophisticate hacking efforts, but fully two thirds have high confidence. 11% report lower confidence.

3%

8%

34% 33%

22%

0%

5%

10%

15%

20%

25%

30%

35%

40%

1 2 3 4 5

Somewhat confidentCompletely confident our

technology will stay ahead



What concerns you most about a digital identity security

breach?

Tarnishing their brand’s reputation and loss of data keep three fourths of respondents awake at night. More than half also worry about non-compliance fines, and keeping up with constant hacking threats.

78% 77%

55%52%

45%

0%

10%

20%

30%

40%

50%

60%

70%

80%

90%

Brand reputation Loss of data Fines (GDPR etc) Keeping up withconstant threats

Losing our competitiveadvantage



When considering a new identity and access management

system, what features are must haves?

The majority (78%) of those surveyed insist an upgrade or new system must include robust threat detection. Other must haves, in priority order: single sign on ID, scalability, analytics, end user device analysis, and data privacy choices.

78%

63%

58%

56%

51%

49%

0% 10% 20% 30% 40% 50% 60% 70% 80% 90%

Robust threat detection, e.g.,

trusted vs untrustworthy actors

Create a single ID across devices/

platforms/locations for my customers

Scalability for growth, mergers,

and/or acquisitions

Deep analytic capability

End-user device analysis

Dynamic end-user choices for data privacy



When are you planning to refresh, upgrade or replace your

current identity and access management system?

26% of respondents plan to improve their current identity and access management system within the next 12 months. 34% say such action is likely to take place in the more distant future. Those with no plan in place say they’d like to know more about new technologies.

4%5%

17%

34%

40%

0%

5%

10%

15%

20%

25%

30%

35%

40%

45%

Within 3 months In 3 to 6 months In 6 to 12 months 12 or more months No plans to change, butinterested to learn about

new technologies



Profile of Responders:

Industry Sectors

Responders represent a wide variety of industries.

Financial Services

22%

Business Services

19%

Retail Trade

14%

Mfg - High Tech

11%

Healthcare

10%

Public Administration

5%

Mfg - General

4%

Wholesale Trade

4%

Mfg - Primary

3%

Transportation

3%

Media

2% Telecom

Services

2%

Utilities

1%

Other

11%




Revenue

76% of those surveyed work in Fortune 1000 companies with revenues over $1.5 billion.

>$1.5billion

76%

$500 million -

$1.5 billion

5%

$250 - 500 million

3%

<$250 million

16%




Job Level

57% of those surveyed hold director or executive level positions in their organizations.

CxO

10%

VP

10%

Director

37%

Manager

43%



Learn more at forgerock.com

ForgeRock offers a unified platform for both

employees and consumers, identity and access

management for the Internet of Things,

customer, cloud, mobile, and enterprise

environments.

https://www.forgerock.com/

Identity and Access Management...What identity and access management systems does your organization...

Documents

Transcript of Identity and Access Management...What identity and access management systems does your organization...