IAM – Identity And Access Management

Are they who they say they are? Digital has made identity & access management (IAM) crucial and complicated. Read our insights.

Discover how Forrester supports IT leaders.

Insights

Blog

OpenAI Requires Identity Verification For Access To Its Latest Models

Andras Cser 6 days ago
OpenAI announced that it will require organizations to complete an identity verification (IDV) process to verify their organization’s identity before being allowed to access the latest OpenAI models. Identity verification will likely require developers to digitally verify themselves using government-issued photo ID from permitted countries and prove their affiliation with their organization. Forrester expects that […]
Blog

Banks Need Modern Identity Verification Solutions To Stay Competitive And Resilient In The AI Era

Meng Liu April 11, 2025
There is a growing need for more secure identity verification in the financial services industry due to the rise of sophisticated fraud tactics and increasingly complex regulatory requirements. Learn the four key challenges that financial services firms face in this preview of a new report.

Showcase Your Security & Risk Innovation With A Forrester Award

Get recognized for excellence in security, privacy, and risk innovation. Apply for a Forrester Security & Risk Enterprise Leadership Award to celebrate your success in creating resilient operations. Apply by July 23, 2025.

Blog

RSAC 2025 Early Stage Expo Preview: AppSec, IAM, GenAI, SecOps, And More

Heidi Shey April 8, 2025
As we put together our game plan for what to see at RSA Conference 2025, we wanted to scope out innovation, identify which vendor booths will be a must-see, and (at least for one of us) minimize the number of steps to take around the Moscone Center.
Blog

So There Won’t Be A Wiz IPO — What Does That Mean For Cyber IPOs In 2025?

Merritt Maxim April 3, 2025
Last week’s mega deal of Google acquiring CNAPP provider Wiz for $32 billion has some lamenting the future of IPOs in the cybersecurity space.
Blog

The Brewing Battle For Digital Online Age Verification

Merritt Maxim March 11, 2025
With online identity verification well understood and maturing, the next brewing verification battle is around age verification, a subset of identity verification.
Blog

Another Cautionary Tale Of The Perils Of Using Password Managers

Andras Cser March 5, 2025
Last week, password wallet vendor LastPass experienced an outage. All LastPass systems and services have since been restored and are up and running. It is worth noting that this is not the first incident involving password wallet products. Past incidents include: LastPass had an outage in 2024. PasswordState had a malicious DLL cause a breach […]
Blog

Quantum Security Isn’t Hype — Every Security Leader Needs It

Merritt Maxim March 3, 2025
The commercial availability of quantum computers that can compromise traditional asymmetric cryptography is still five to 10 years away. But security and risk (S&R) professionals must assess and prepare for the impact of quantum security now.
Blog

Deepfakes Are Here: Here’s What To Do

Merritt Maxim February 11, 2025
In the last two years, growing concerns around the proliferation of and advances in deepfakes has raised concerns around their potential to impede adoption of facial and voice biometrics.
Blog

CrowdStrike Acquires SaaS Security Specialist Adaptive Shield

Andras Cser November 14, 2024
Cybersecurity platform provider CrowdStrike announced plans to acquire Adaptive Shield, a SaaS security posture management (SSPM) vendor. Some sources reported the purchase price to be around $300 million. If that purchase price is accurate, based on Forrester’s estimates of Adaptive Shield’s current revenue, that price represents an approximately 12–15x revenue multiplier and 6 times more […]
Blog

IATA’s Distributed Digital Identity Framework Serves A Compelling Business Need

Andras Cser November 5, 2024
The International Air Transport Association (IATA) — the trade association for world airlines, representing over 330 airlines and over 80% of global air traffic — announced a new framework and plans for using decentralized digital identity (DDID) to provide end-to-end travel experiences for domestic and international passengers.
Blog

Decentralized Digital Identity: The Global Acceptance Network Gains Momentum

Andras Cser October 10, 2024
Bhutan became the first country to join the Global Acceptance Network (GAN), a foundation that aims to operate a nonprofit decentralized digital identity (DDID) network. Learn more about the use cases for GAN and how it can become successful in this post.
Blog

Visa Risk And Identity Solutions Acquires Fraud Management Vendor Featurespace

Andras Cser October 2, 2024
Last week, Visa announced the acquisition of Featurespace, a UK-based enterprise fraud management and anti-money-laundering (AML) vendor.
Podcast

How Close Are We To Killing Passwords?

What It Means September 5, 2024
Are passwords obsolete or still a necessary evil? In this episode, Vice President and Principal Analyst Andras Cser and Principal Analyst Geoff Cairns describe where we are on the path to passwordless authentication for both enterprise and consumer users.
Blog

Recapping This Year’s InCyber Forum

Madelein van der Hout May 28, 2024
AI and European cybersecurity regulations were among the hottest topics at the recent InCyber Forum in Lille, France. Get more detail on the key trends in this event review.
Blog

Travel And Mobile Are Driving Decentralized Digital Identity (DDID) Growth

Andras Cser March 28, 2024
Recently, SITA, the multinational IT company supporting the air travel industry, announced that it would be the lead investor in the Series A funding for Indicio, a decentralized digital identity (DDID) solution provider. Find out what this means for the evolution of DDID.
Blog

Announcing The Forrester Wave™: Workforce Identity Platforms, Q1 2024

Geoff Cairns March 25, 2024
Last Wednesday, we released The Forrester Wave™: Workforce Identity Platforms, Q1 2024. We looked at the top 12 vendors in the market and evaluated them across 24 criteria. Workforce identity platforms energize a centripetal (inward) force necessary to combat the centrifugal (outward) forces that challenge identity and access management (IAM) deployments in organizations today. These […]
Blog

Data Governance: Your Key To Unlocking An Insights-Driven Business

Jayesh Chaurasia February 5, 2024
The key to turning data into meaningful and actionable insights across the organization lies in a frequently overlooked area — establishing a strong foundation of data governance.
Blog

Navigate The Identity And Access Management Landscape In China

Meng Liu January 25, 2024
The identity and access management (IAM) market in China is still emerging but its importance and priority have grown significantly. Learn how in this blog post.
Blog

My Key Takeaways From This Year’s Singapore FinTech Festival

Meng Liu November 19, 2023
In Singapore, the ease of global networking is impressive. At the recent Singapore FinTech Festival, a significant event in APAC attracting around 66,000 attendees, I had the valuable chance to connect with clients and friends worldwide. The event offered both enriching conversations and intriguing fintech product demonstrations. Here are some key takeaways from the event: […]
Blog

Supercharge Your Defense: Level Up AI-Powered Models To Combat Fraud In APAC

Meng Liu October 5, 2023
As authorized push payment fraud rises, learn three things your enterprise fraud management vendor should have to better leverage AI to combat fraud.
More posts