Identity & Access Management

The proliferation of cloud services, social and mobile have rendered the traditional firewall increasingly obsolete. Digital identity has become key to enforcing access controls. As a result, Identity & Access Management (IAM) has become a major priority for the modern enterprise. Once viewed as an operational back-office issue, IAM is now gaining board-level visibility following numerous high-level breaches that have occurred due to the failure of organisations to effectively manage and control user access. The importance of IAM has been further elevated by an evolving regulatory landscape and trends such as Bring Your Own Device (BYOD) and cloud adoption, which are forcing organisations to re-evaluate how digital identities are managed.

• Security: how is your current IAM capability improving your ability to protect what matters?
• Compliance: are employee and vendor identity changes being managed in the systems as quickly as they’re happening? Are regulatory changes being prepared for and met?
• Disruptive technologies: is the enterprise allowing employees to bring their own devices/identities? Is cloud adoption and the Internet of Things on the horizon?
• Operational excellence: how quickly is the enterprise onboarding new employees? Are there role-based access controls or centralised access request and approval processes in place?

IAM describes a complete set of services and capabilities that not only provide a governance framework for digital identities, but allow organisations to make intelligent, risk-based decisions about who is allowed to access which information assets, when and in what context.

IAM also provides many end user and business benefits, such as reduced operational costs resulting from streamlined provisioning of access, reduced or single sign-on capabilities, and faster onboarding of new hires.

KPMG’s Cyber Security practice helps clients identify and protect their critical business assets in the face of a constantly evolving threat landscape and an increasingly challenging regulatory environment. We help clients identify their most important information assets and work with them to develop an effective approach that focuses on people, process, and governance as a foundation for technology enablement.

KPMG has worked with some of the world’s largest organisations to develop a range of market leading digital identity services to help businesses reduce the risk of identity-related breaches.