Assessing Identity and Access Management Process Maturity: First Insights from the German Financial Sector

Abstract

ABSTRACT We develop an Identity and Access Management (IAM) process maturity model and provide a first assessment of four organizations in Germany’s financial industry. We find that the assessed organizations show merely average IAM maturity levels, and especially lack maturity and compliance in user registration and logging and tracking. Information technology (IT) managers, consultants, and auditors can use the model to (self)-audit, compare, or benchmark IAM process maturity, or identify weaknesses in organizations’ IAM processes.