New study looks at the risks associated with ‘identity sprawl’
- Published: Wednesday, 24 August 2022 12:27
Radiant Logic has published a new study, the ‘Identity Data Management: Roadblock or Business Enabler’ report, providing insights into today’s identity management challenges.
Gartner Peer Insights and Radiant Logic surveyed global IT and information security leaders for the report, to understand how organizations are addressing identity sprawl and its resulting identity management challenges.
Identity sprawl is the rapid growth of enterprise identity silos, and the explosion of user information, attributes, and credentials that accompanies it. This acceleration results in greater security and compliance risks, as identity information spreads across a complex web of legacy, hybrid, and multi-cloud systems. The lack of visibility and control across all these systems creates the opportunity for identity-driven cyber attacks - offering more opportunities for misuse or negligence by individuals (employees, former employees, contractors, partners) and opening the door for cybercriminals to take advantage and move laterally throughout an organization.
The survey found that 67 percent of respondents know they have identity sprawl, but don’t know how to fully address it. And although 58 percent rated identity management of vital importance, 61 percent stated that their business views identity management as too time-intensive and costly to manage effectively on an ongoing basis. Respondents reported the most common negative impacts as increased technical debt (66 percent) and negative productivity and morale (64 percent) among employees.
Additional key findings include:
Disparate identities are causing an increase in identity-related breaches as IT leaders struggle to address sprawl.
- Consistent with recent industry research, 84 percent of organizations reported an identity-related breach and 67 percent experienced one in the last year.
- 60 percent of organizations stated they have over 21 disparate identities per user, with 34 percent reporting 21-30 disparate identities.
- 28 percent of organizations reported making business decisions with limited visibility.
IT leaders face continued employee frustration and productivity challenges, yet they must contend with on-going budget constraints.
- 71 percent of those surveyed don’t have a budget allocated to identity-based projects, while 35 percent are concerned that they won’t be able to protect their organization from identity-based security threats.
- 85 percent of those surveyed are concerned about users logging into personal applications with work credentials and have had minimal success preventing it.
- 71 percent report that the most common user complaint from managing identity is poor integration with new tools and applications and getting help for these issues requires time and resources from support.