New trends in computing, including social media and cloud computing, are challenging traditional approaches to computer security that will force organisations to adapt – or to risk marginalisation and extinction, according to Gartner analyst Carston Casper.
Casper, speaking at the 13th Gartner Security and Risk Management Summit in London today, said that users – whether staff, partners or potential customers – were becoming increasingly demanding, and that organisations need to respond quickly to these demands or risk marginalisation.
"In order to support users, any time, anywhere, we need to know who they are, where they are – and what on Earth they want," said Casper.
But businesses nevertheless need to tackle this conundrum to avoid being left behind, he added.
"Well developed identity and access management reduces cost and improves business agility, and supports the delivery of new products and new services. What user wants to wait seven days to get access to an application? Even public services are faster than that these days.
"This need for flexibility is pushing identity and access management to the cloud, enabling users to access new services based on existing identity information," said Casper.
Even just two years ago the idea of managing identity and access management in the cloud would be unthinkable, said Casper. "Well, now things are changing. In 2012, even 13 per cent of German and 17 per cent of UK respondents said that they store personal data in the cloud."
This is spreading into identity management, he added, with users expecting companies and other organisations to respect, and provide access via, the identities they maintain in the cloud, via sites such as Twitter, LinkedIn and Facebook.
"Challenging the delivery model doesn't mean that the mission has changed. Security management must still provide appropriate security for applications, end points, repositories, networks and must also minimise vulnerabilities," said Casper.
