Security and risk (S&R) leaders often struggle to understand the gaps and potential security vulnerabilities related to identity management tasks such as user provisioning, access certification, password management, and administration. To help S&R leaders respond to these challenges, we developed the Forrester Identity Management And Governance (IMG) Maturity Model. With the model, S&R leaders can identify gaps in their current IMG environment, evaluate their maturity, and incorporate those findings into their security strategy.