The Forrester Wave™: Role Management And Access Recertification, Q3 2011

Role management and access recertification has moved to center stage for security and risk (S&R) professionals, business, and auditors. It provides higher security because it provides a better understanding of who has access to what and why; thus, fewer people accumulate privileges during their tenure at the company. It also provides greater savings because of IT administration automation and reduced costs of audit findings remediation. In Forrester's 79-criteria evaluation of role management and access recertification vendors, we found that Aveksa and SailPoint led the pack because of their close attention to business user friendliness, easy configuration, and mapping to identity governance business processes. Although NetIQ OEMs Aveksa's solution, clients remain concerned about Microsoft Active Directory displacing NetIQ directories and thus question NetIQ's overall viability. CA Technologies, Courion, IBM, and Oracle show strength in integration with user account provisioning systems and closed loop compliance but are a tad behind in user interface ease of use.