#Israel #Tel Aviv #AI Security #Identity Management #Security Leaders

Security Leaders Face Visibility Challenges in Identity Management

In a new report by Oak, a company specializing in AI-native identity management, alarming findings have surfaced regarding the landscape of identity management among security leaders. Conducted through in-depth interviews with Chief Information Security Officers (CISOs) and identity and access management (IAM) leaders, the research reveals a troubling reality: despite heightened investments in identity management systems, more than half of security executives are unable to see who or what has access to their systems.

The Current State of Identity Management

The report, titled "The Voice of 200 CISOs," emphasizes the persistent visibility gaps that organizations struggle to overcome. Spending in the identity landscape has surged, with forecasts suggesting expenditures will rise from $18.7 billion in 2024 to $29 billion by 2029. Yet, many organizations feel overwhelmed by the increasing complexity of managing human and non-human identities, particularly amid the rise of AI agents influencing processes.

Gartner's projections add to the equation, suggesting that by the year 2028, enterprises within the Fortune 500 will utilize more than 150,000 AI agents, a substantial increase from the fewer than 15 employed in 2025. Surprisingly, only 13% of organizations believe they have effective governance surrounding AI agents, leaving a vast majority navigating a fog of uncertainty in identity management.

Key Findings and Concerns

According to the findings, 51% of security leaders acknowledge that incomplete visibility of organizational identities poses a major challenge. 38% of respondents pointed out applications that their identity programs fail to reach, leading to instances where individual employees maintain multiple, disjointed accounts and roles within various applications.

Moreover, the advent of non-human identities, such as service accounts and automated agents, has deepened the gap in governance, with 37% of participants noting gaps in managing these identities. This is compounded by a lack of ownership over these accounts and concerns about too many service accounts existing without clear control.

Security professionals also reported that the identity tools they use often create additional workloads rather than alleviating them. For instance, 34% highlighted the recurring manual labor required in managing identity programs, while 29% complained about the operational costs tied to altering these identity tools.

"Security teams are often left managing these challenges alone, as the complexity of systems continues to grow," said Shai Morag, Oak's CEO. He emphasized that the traditional identity structures are insufficient for the current technological environment, particularly as interconnected systems and AI introduce more variables.

The Path Forward

To address these emerging challenges, the report suggests two primary strategies for security teams. Firstly, teams should identify a singular high-value gap within their existing governance frameworks, measuring outcomes based on access removed and hours saved. Once they excel in one area, teams can expand further.

A notable trend observed among security leaders is the intention to unify their access reviews and re-evaluate their governance platforms. Many are now considering integrating AI agents into their scope, recognizing the importance of a comprehensive approach to identity management that encompasses everything from human to non-human identities.

Conclusion

As AI technology continues to advance, the pressing need for better identity governance becomes apparent. The Oak report highlights that significant gaps still exist, and it is imperative for organizations to adapt their identity management strategies to address these vulnerabilities. With the proper investments and innovations in place, organizations can strive to regain control and visibility within their identity ecosystems, safeguarding against potential security threats in a rapidly evolving landscape.