Page 26 - Cyber Defense eMagazine RSAC Special Edition 2025

The takeaway? Cyber executives are ready to grow their identity programs, but they’re facing bottlenecks.
The report looks at some of the key challenges and how leaders can overcome them with AI-driven
solutions.

Identity security survey highlights

• Phishing is the No. 1 threat, according to respondents
• 75% of respondents plan to adopt an AI-driven solution
• 50% rate their identity management as mature

Currently speaking

Q&A with Chris Gossett, Chief Growth Officer at SailPoint

With identity-based threats on the rise, how do you see the role of identity security evolving in modern
cybersecurity strategies?

Identity security has gone from being just one piece of cybersecurity to being the foundation. Attackers
aren’t breaking in anymore—they’re logging in and using stolen credentials, over-permissioned accounts,
or AI-driven phishing attacks that are scarily convincing.

The future of cybersecurity is about identity-first security. That means enforcing least privilege access,
so access isn’t accumulating over time, and managing every identity—whether it’s human, bot, or AI.
Organizations also need full visibility into who has access to what across all applications. If you don’t
know that, you’re flying blind. In 2025, protecting identity is protecting the business.

Many organizations are shifting to an ‘identity-first’ security approach. What challenges do organizations
face in implementing this model, and how can they address them?

One big challenge? Cultural resistance. Businesses and people don’t love having their access restricted,
even if it’s for security. A fix? Strong identity governance-automated least privilege enforcement and clear
communication. Show teams that tighter identity controls aren’t about slowing them down—they’re about
keeping organizations safe.

The survey indicates that AI is playing a growing role in identity governance. How can organizations
leverage AI for identity threat detection and risk mitigation?

AI in identity governance is like having a security guard who never sleeps, never takes coffee breaks,
and understands your environment better than you do. One of the biggest challenges in identity security

26