波耐蒙研究所：2025身份与访问管理（IAM）成熟度现状报告（英文版）（42页）.pdf

1、 Sponsored by GuidePoint Security Independently conducted by Ponemon Institute LLC Publication Date:May 2025 The State of Identity and Access Management(IAM)Maturity !Ponemon Institute Research Report Sponsored by DomainTools Independently conducted by Ponemon Institute LLC Publication Date:April 20

2、19 Sponsored by GuidePoint Security Page Conducted by Ponemon Institute 1 The State of Identity and Access Management(IAM)Maturity May 2025 Part 1.Executive Summary Identity and Access Management(IAM)Maturity refers to the extent to which an organization effectively manages user identities and acces

3、s across its systems and applications.Its a measure of how well an organization is implementing and managing Identity and Access Management(IAM)practices.A mature IAM program ensures that only authorized users have access to the resources they need,enhancing security,reducing risks and improving ove

4、rall efficiency.Most organizations remain in the early to mid-stages of IAM maturity,leaving them vulnerable to identity-based threats.This new study of 626 IT professionals by the Ponemon Institute,sponsored by GuidePoint Security,highlights that despite growing awareness of insider threats and ide

5、ntity breaches,IAM is under-prioritized compared to other IT security investments.All participants in this research are involved in their organizations IAM programs.Key Insights:IAM is underfunded and underdeveloped.Only 50 percent of organizations rate their IAM tools as very or highly effective,an

6、d even fewer(44 percent)express high confidence in their ability to prevent identity-based incidents.According to 47 percent of organizations,investments in IAM technologies trail behind other security investment priorities.Manual processes are stalling progress.Many organizations still rely on spre