IBM Named a Leader in 'The Forrester Wave: Identity Management And Governance, Q3 2018'

In its latest report for identity management and governance, Forrester has recognized IBM Security as a Leader. This comes on the heels of our recent achievement of being named a Leader in the “2018 Gartner Magic Quadrant for Identity Governance and Administration (IGA).”

Forrester evaluated nine identity management and governance providers and weighed them across 26 criteria. These nine vendors were identified, evaluated, researched, analyzed and scored. The Forrester Wave report shows how each provider measures up and helps security and risk professionals make the right choice.

Read the complete Forrester Wave

Where Identity Governance and Intelligence Excels

IBM Security’s core identity governance product is called Identity Governance and Intelligence (IGI). IGI provides full enterprise-level identity management and governance capabilities that allow organizations to provision, audit and report on user access and activity.

As detailed in the report, “IBM’s strengths lie in separation of duty and role mining, with aggressive plans to move the IGI platform to the cloud.”

IBM takes a different approach when it comes to separation of duty (SoD), using business activity-based policy modeling. This approach defines SoD policies based on business activities, which are logical business processes or tasks. With this, you can move away from complex roles and provide an environment for nontechnical users in audit, compliance or line-of-business positions to easily make decisions when it comes to proving and maintaining identity compliance.

IBM currently has course-grained governance capabilities in the cloud, with plans to expand to fine-grained in the near future. There will also be a focus on increasing cloud identity analytics capabilities, as well as more flexible workflow controls and automated configuration for common joiner/mover/leaver processes.

Key Takeaways From The Forrester Wave: Identity Management and Governance Report

Security and risk professionals want flexible deployment models and administrative simplicity.
Analytics, cloud support and risk metrics are key differentiators.

IBM’s Commitment to Enterprise Security

Customers all over the world are struggling with too many point products. They are looking for an enterprise security partner that develops solutions and services that are open, integrated and designed to leverage their existing investments. IBM Security continues to invest heavily in identity management and governance and integrate its capabilities into the broader IBM Security immune system.

We believe “The Forrester Wave: Identity Management And Governance, Q3 2018” is a proof point of IBM Security’s commitment to our customers. We will continue to enhance our overall identity and access management (IAM) strategy and strengthen our market presence.

Read the Forrester Wave Report

Katherine Cola

Product Marketing Manager, IBM

Taking the complexity out of identity solutions for hybrid environments

4 min read - For the past two decades, businesses have been making significant investments to consolidate their identity and access management (IAM) platforms and directories to manage user identities in one place. However, the hybrid nature of the cloud has led many to realize that this ultimate goal is a fantasy. Instead, businesses must learn how to consistently and effectively manage user identities across multiple IAM platforms and directories. As cloud migration and digital transformation accelerate at a dizzying pace, enterprises are left…

“Authorized” to break in: Adversaries use valid credentials to compromise cloud environments

4 min read - Overprivileged plaintext credentials left on display in 33% of X-Force adversary simulations Adversaries are constantly seeking to improve their productivity margins, but new data from IBM X-Force suggests they aren’t exclusively leaning on sophistication to do so. Simple yet reliable tactics that offer ease of use and often direct access to privileged environments are still heavily relied upon. Today X-Force released the 2023 Cloud Threat Landscape Report, detailing common trends and top threats observed against cloud environments over the past…

Artificial intelligence threats in identity management

4 min read - The 2023 Identity Security Threat Landscape Report from CyberArk identified some valuable insights. 2,300 security professionals surveyed responded with some sobering figures: 68% are concerned about insider threats from employee layoffs and churn 99% expect some type of identity compromise driven by financial cutbacks, geopolitical factors, cloud applications and hybrid work environments 74% are concerned about confidential data loss through employees, ex-employees and third-party vendors. Additionally, many feel digital identity proliferation is on the rise and the attack surface is…

X-Force certified containment: Responding to AD CS attacks

6 min read - This post was made possible through the contributions of Joseph Spero and Thanassis Diogos. In June 2023, IBM Security X-Force responded to an incident where a client had received alerts from their security tooling regarding potential malicious activity originating from a system within their network targeting a domain controller. X-Force analysis revealed that an attacker gained access to the client network through a VPN connection using a third-party IT management account. The IT management account had multi-factor authentication (MFA) disabled…

Security Intelligence

{{title}}

{{title}}

{{title}}

{{title}}

Topics

Where Identity Governance and Intelligence Excels

Key Takeaways From The Forrester Wave: Identity Management and Governance Report

IBM’s Commitment to Enterprise Security

More from Identity & Access

Taking the complexity out of identity solutions for hybrid environments

“Authorized” to break in: Adversaries use valid credentials to compromise cloud environments

Artificial intelligence threats in identity management

X-Force certified containment: Responding to AD CS attacks

Topic updates