Identity and Access Management Survey: Current Market Challenges and Solutions

World®
’16
Identity and Access Management Survey:
Current Market Challenges and Solutions
Shawn Keve - Executive VP - Simeio Solutions
Dave Culbertson - WW VP, Identity Suite Solution Sales - CA Technologies
Ed Pascua - VP Business Development - Simeio Solutions
SCX32S
SECURITY

2 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
© 2016 CA. All rights reserved. All trademarks referenced herein belong to their respective companies.
The content provided in this CA World 2016 presentation is intended for informational purposes only and does not form any type of
warranty. The information provided by a CA partner and/or CA customer has not been reviewed for accuracy by CA.
For Informational Purposes Only
Terms of this Presentation

Abstract
Every day, the demand for advanced identity and access management (IAM) grows more critical,
but many enterprise security teams are struggling to address this demand. CA conducted an
extensive survey of more than 200 enterprise security executives and found that less than 20
percent of respondents have established automated, standardized IAM processes and only 15
percent say their current systems fully meet their needs. Why are so many organizations hitting
roadblocks and how can you avoid them? This session will examine the results of our survey.
We’ll outline how your peers are employing IAM today, and identify what’s working and what’s
not. In the session, a panel of IAM experts will walk through the approaches security teams can
take to maximize the benefits of IAM. Finally, the session will examine the critical role external
partners can play in helping enterprise security teams most quickly and effectively overcome
their obstacles.
Shawn Keve
Simeio Solutions
Executive VP
Dave Culbertson
CA Technologies
WW VP, Identity Suite
Solution Sales
Ed Pascua
Simeio Solutions
VP Business
Development

Shawn
Keve
Simeio Solutions
Executive VP
Panel Session
Possible
Client
Customer
Title
Dave
Culbertson
CA Technologies
VP, ID Suite Solutions
Ed
Pascua
Simeio Solutions
VP, Business Dev
(Session Moderator)

Shawn
Keve
Simeio Solutions
Executive VP
Panel Session
Possible
Client
Customer
Title
Dave
Culbertson
CA Technologies
Ed
Pascua
Simeio Solutions
VP, Business Dev
(Session Moderator)

Agenda
IDENTITY CENTRICITY – THE KEY TO APP ECONOMY AND THE OPEN ENTERPRISE
IAM SERVICE PROVIDER OPPORTUNITY — ENTERPRISE SURVEY RESULTS
SIMEIO CAPABILITIES ENABLING IAM SERVICES OPPORTUNITY
Q & A
1
2
3
4

The Application Economy is here
Half of enterprises today say the application economy is significantly disrupting their
industries — while 44% say it is doing the same to their own organization.1
-- CA Technologies with Vanson Bourne
Sources:
1. CA Vanson Bourne Study
2. eMarketer, Smartphone Users Worldwide Will Total 1.75 Billion in 2014 , Jan. 16, 2014
3. McKinsey Global Institute, Disruptive Technologies, advances that will transform life, business and the global economy, May 2013
4. GMSA Intelligence, From Concept to Delivery, the M2M Market Today, Feb. 17, 2014
5. IDC Press Release, IDC Predicts 2014 Will Be a Year of Escalation, Consolidation, and Innovation as the Transition to IT's "3rd Platform" Accelerates, Doc#prUS24472713 ,Dec. 3, 2013
1.75Bsmartphone users in
2014 2
>400M
users of intelligent
digital assistants like
Siri and Google Now 3
250M
M2M connections
this year4
>$100B
in cloud spending
this year 5
World®
’16© 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD8

In today’s world, breaches are the norm, information is
everywhere and people need access from anywhere,
-- Identity is key.
World®

Identity-Centric Security empowers your business so the
right people can securely access the right information –
when and where they need it.
This is Security in the Modern Era…
From your secure access on a
mobile phone to risk-based
authentication to privileged
identity access.
Protect Identities Empower Business
Give your customers a friction-
free user experience with the
confidence of built-in security
under the covers.
Stop Breaches
Protect sensitive data from
insider threats and external
attacks by controlling users
and their access.
World®

Identity-Centric Cybersecurity Controls
Privileged
Access
Provisioning
and Governance
Authentication Authorization
Enabling the lines of
business to make
decisions about
appropriate access and
enforcing those decisions
Control administrator
access and system
accounts plus deep
forensic monitoring
Providing greater Identity
Assurance and Proofing
through Strong
Authentication
Enforcing Authorization
policies ensuring
appropriate access to
critical resources
World®

IAM Market Survey

Enterprise IAM Strategies
§ Management levels represented are predominantly senior decision makers:
– 20% are CxOs (33% C-level respondents in US alone)
– 11% are VPs
– 34% are directors
– 29% are managers
§ Responders work for firms with a wide range of revenue levels:
– 46% work in Fortune 1000 companies with revenues over $1.5 billion
– 23% work in large companies with revenues between $500 million and $1.5 billion
– 9% work in mid-market companies with $250 million to $500 million in revenues
– 22% work in small companies with less than $250 million in revenues
Survey Results From 210 Enterprise Respondents

Enterprise Respondent Countries, Market Industries
47
30
27
19
16
14
10
8
7
7
4
4
4 3
2 2
2
1
1 1
1 FINANCIAL SERVICES
MFG - HIGH TECH
BUSINESS SERVICES
HEALTHCARE
MFG - GENERAL
RETAIL TRADE
WHOLESALE TRADE
TELECOM SERVICES
TRANSPORTATION
CONSUMER SERVICES
MFG - PRIMARY
UTILITIES
GOVERNMENT
EDUCATION
MINING
CONSTRUCTION
ENERGY
AGRICULTURE PRODUCTION
PUBLISHING
INSURANCE
MEDIA
152
8
7
6
6
4
3
3
3
2 2 1
1
1
1
1
1
11
1
1
1
1
1
1
US
NL
ZA
BR
CO
AE
MX
EC
HU
DK
PT
SE
GR
UK
FI
RS
AN
SA
LT
SI
CA
AR
CM
BE
PA

Sample Enterprise Respondent Titles

What type of identity and access management (IAM)
system do you currently use? (Check all that apply)
0
10
20
30
40
50
60
70
80
90
100
On-premise license
solution
Homegrown
systems(s)
None On-premise license
solution,
Homegrown
systems(s)
Not sure On-premise license
solutions,
SaaS/cloud-based
licensed solutions
SaaS/cloud-based
licensed solution
On-premise license
solution,
Homegrown
systems(s),
SaaS/cloud-based
licensed solution

What % of your business applications are SaaS/cloud-
based? (Check one)
0
10
20
30
40
50
60
70
80
90
100
Less than 10% 11% to 25% 26% to 50% 51% to 75% More than 75%

How many user IDs (including internal, partner, contractor, and
customer IDs) does your organization manage? (Check one)
0.00% 5.00% 10.00% 15.00% 20.00% 25.00% 30.00%
250 or less
251 to 500
501 to 1,000
1,001 to 5,000
5,001 to 10,000
10,001 to 50,000
50,001 to 100,000
100,001 to 500,000
500,001 to 1,000,000
More than 1,000,000

How would you assess the maturity of your company's
IAM? (Check one)
0
10
20
30
40
50
60
70
80
Manual, ad hoc, informal
processes
Manual, semi-formal processes,
tactical priorities
Establish roles, policies, and
structures
Automated, standardized,
managed
Optimized, integration with
business processes

Manual IAM OK for Fewer IDs — Challenges Increase
With More
0%
10%
20%
30%
40%
50%
60%
70%
500 or less 501 to 1,000 1,001 to 5,000 5,001 to 50,000 50,001 to 100,000 100,001 to 500,000 500,001 or more
% Manual IAM Processes

What IAM challenges have you seen with your current
IAM system/process? (Rate 1-5, 1=Minor, 5=Significant)
0%
10%
20%
30%
40%
50%
60%
70%
80%
4,5
3,4,5

Dissatisfaction With Current IAM Systems and Processes
0.00%
10.00%
20.00%
30.00%
40.00%
50.00%
60.00%
70.00%
80.00%
90.00%
100.00%
250 or less 251 to 500 501 to 1,000 1,001 to 5,000 5,001 to 10,000 10,001 to
50,000
50,001 to
100,000
100,001 to
500,000
500,001 to
1,000,000
More than
1,000,000
Does not meet our needs Needs substantial improvement Some room for improvement

Even More Dissatisfaction With Manual Approaches
(85 Respondents)
0.00%
10.00%
20.00%
30.00%
40.00%
50.00%
60.00%
70.00%
80.00%
90.00%
100.00%
Manual, ad hoc, informal processes Manual, semi-formal processes, tactical priorities
Does not meet our needs Needs substantial improvement Some room for improvement

How frequently does your internal IT staff perform the following IAM functions?
(Rate 1-5, 1=Infrequent e.g. Quarterly, 5=Very frequent e.g. hourly)
0% 10% 20% 30% 40% 50% 60% 70%
Provision/de-provision users to cloud services and/or enterprise applications
Manage entitlements certification for users, roles, and resources
Rotation of passwords for endpoints, user stores, and application services …
Breach monitoring and identification
Perform identity analytics and role management
Implement and manage federation policies
Generate access usage reports and identity centric reports
Develop provisioning approval and fulfillment workflows
Implement policy controls to identify business and regulatory violations
Develop SSO support for non-standard SAML-based applications
Implement and manage PKI/certificate based two-factor authentication
Delegating administration to partners, contractors, and vendors
Develop authentication and provisioning policies
3,4,5
4,5

Has your organization worked with an external service provider
for help with IAM efforts listed below? (Check all that apply)
0%
5%
10%
15%
20%
25%
30%
35%
40%
45%
Single sign-on and
identity federation
services
Haven't worked with
IAM service provider
Initial IAM platform
integration and
configuration
Integration projects,
such as integration of
new applications
Access to IAM
software-as-a-service
Advanced
authentication services,
such as integration of
tokens, one-time
passwords, and so on
Ongoing IAM support,
such as user
provisioning,
deprovisioning

What factors have been or would be most important in deciding
to adopt IAM managed services? (Check all that apply)
0%
5%
10%
15%
20%
25%
30%
35%
40%
45%
50%
Ability to expand as needed Ability to deliver new
functionality
Free up staff resources for
other business priorities
Get new capabilities
deployed more quickly
Predictability of ongoing
expenditures
We would not adopt IAM
managed services

What is your organization’s yearly IAM spend?
0%
5%
10%
15%
20%
25%
30%
Less than $20,000 $20,000 to $50,000 $51,000 to $100,000 $100,001 to $250,000 $251,000 to $500,000 More than $500,000

What prevents your organization from investing in IAM?
0% 5% 10% 15% 20% 25% 30% 35% 40%
Organizational immaturity
High and unpredictable cost
and implementation time
Lack of internal competence
to set requirements

Simeio-CA Partnership
RELATIONSHIP
§ Partner since 2007
§ CA Innovative Partner of the Year Finalist
for 2014
§ Simeio Customer EFH Wins CA's Impact of
the Year Award
§ CIO Review’s Top CA Security Services
Provider
SIZE
§ Global team of 300 + IAM Professionals
§ 60 + Trained CA IAM Implementation
Engineers
CAPABILITY
§ CA Identity Suite
§ CA Single Sign On and Federation
§ CA Advanced Authentication and Risk
Authentication
§ CA Privileged Access Management
IP
§ Accelerated Application Onboarding
§ Identity Intelligence Center™
§ Advanced Analytics and Risk Intelligence
§ Identity Orchestrator™

Simeio Identity-as-a-Service
COMPLETE
• Access Management
• Identity Administration
• Privileged Identity Management
• Role and Compliance Management
• IT Governance, Risk and Compliance
• Security and Risk Intelligence
SECURE AND RELIABLE
• Architected for security, scalability and reliability
• Multiple certifications and attestations (e.g. ISO 27001, SOC 2)
An Enterprise-grade Identity-as-a-Service (IaaS) Platform.
FLEXIBLE
• Technology agnostic
• Tailored to your specifications
• Flexible subscription options

Questions?

Security
For more information on Security, please visit:
http://cainc.to/EtfYyw

Identity and Access Management Survey: Current Market Challenges and Solutions

Recomendados

Recomendados

Mais conteúdo relacionado

Mais procurados

Mais procurados (20)

Destaque

Destaque (20)

Semelhante a Identity and Access Management Survey: Current Market Challenges and Solutions

Semelhante a Identity and Access Management Survey: Current Market Challenges and Solutions (20)

Mais de CA Technologies

Mais de CA Technologies (20)

Último

Último (20)

Identity and Access Management Survey: Current Market Challenges and Solutions