Okta users: with the recent incident, are you resetting user passwords?

Identity & Access Management (IAM)Threat Intelligence & Incident Response

Yes - admin users only54%

Yes - all users37%

No8%

196 PARTICIPANTS

2.2k views

Content you might like

Would a security breach of your SSO vendor make you switch providers?

Yes29%

It depends on the vendor’s incident response60%

No7%

Not sure3%

View Results

We're mandated to allocate IT costs to the service level, but this creates friction with Identity & Access Management (IAM). The issue: non-negotiable security costs (MFA, SSO, governance) often exceed the cost of low-value services they protect (e.g., internal portals), leading to business owner pushback. How have you addressed this "Low-Value Service Paradox"? Do you keep foundational SSO/basic provisioning as corporate overhead or allocate everything? Do you use risk- or value-weighted allocation to subsidize essential, low-cost services? Who owns the final decision on allocation formulas—Finance, CIO Council, or Security? Please share specific solutions and governance models that have made IAM cost allocation fair and sustainable.

Read More Comments

What's a greater concern for returning to the office? Comment how you are prioritizing...

Human Factors (fears, mental health, physical spacing)86%

Technical / IT Factors (on-premise tools, pivoting back away from remote)13%

Any tips for evaluating/implementing solutions for application detection and response? What’s your experience been like with these tools so far?

Anyone using Hashicorp to drive privileged Access management PW compliance by any chance? if yes, any challenges pulling data from the solution and matching secrets to privileged IDs?