Saviynt launches AI tool for identity risk management

Saviynt has introduced its AI-powered Identity Security Posture Management (ISPM) as a feature of its Identity Cloud platform.

The ISPM tool is designed to provide comprehensive insights into an organisation's identity and access posture, assisting in the prioritisation and remediation of security risks. The solution is targeted at organisations seeking an overview of their identity landscape; a need that has been underserved until now according to Saviynt.

Saviynt's ISPM employs Zero Trust principles and brings together identity, access, activity, policies, configurations, events, and security signals within an AI-driven, enterprise-grade data lake. This approach is intended to deliver complete visibility and control for both human and non-human digital identities across on-premises and cloud environments.

Joseph Tyler, Senior Manager, IGA, at GE HealthCare, described how the tool is expected to support the company's identity security requirements as it operates as an independent entity.

"As GE HealthCare became a stand-alone company, the demands around identity security and audit readiness significantly increased. We are excited for Saviynt's ISPM to help us shift from a reactive to a proactive approach – empowering our teams to identify risks before they become issues and streamline audit preparation through self-service capabilities. We expect ISPM to cut audit prep time by up to 90% and help us maintain the integrity of our new identity environment by detecting excess access, abnormal behavior, and emerging trends that could signal risk," Tyler said.

Saviynt highlights that, while Identity Governance and Administration (IGA) is foundational for many organisations, it believes a solution providing visibility across identity and access risks, control effectiveness, and data hygiene has been missing from the market. The ISPM solution differs from existing offerings by addressing the spectrum of identity security challenges, not just focusing on access or credential management, but also tackling breach prevention and compliance maintenance.

"Identity-based attacks are rising at an alarming rate, and organizations remain overwhelmed with keeping clean environments," Sinha said. "Saviynt's ISPM is a game-changer – providing AI-driven insights to help organizations mitigate identity risks proactively as well as improve identity data hygiene and elevate their audit and compliance posture. It empowers organizations to start their identity security strategies with clean, enriched, and transformed identity data," Vibhuti Sinha, Chief Product Officer, Workforce Identity, Intelligence, at Saviynt, commented on rising cyber risks and the growing volume of identity data.

The ISPM tool allows organisations to discover and inventory both human and non-human identities, access, and resources across their networks. Features include automated identification of role and entitlement descriptions, ownership discovery for orphaned and service accounts, duplicate identity cleanup, and enhanced identity data quality. It also aims to improve governance controls by reducing access certification times by up to 90%, onboarding costs by 60-70%, and access request times by up to 80%.

ISPM supports audit preparation and maintenance of compliance by providing self-service evidence collection and timeline views tracking all identity-related changes and governance history. Users can generate and drill down into custom dashboards via Savi Copilot, analyse trends, or quickly create reports showing programme effectiveness without specialist technical resources or business intelligence tools.

The system also involves application owners in the identity management process, supplying them with clear insights into access, separation of duty controls, risk, and usage data for their applications. According to Saviynt, this is a specific area that has presented challenges for many organisations in their identity management initiatives.

Saviynt's ISPM is aimed at helping organisations prioritise risk and remediation activities and ultimately reduce their identity-related attack surfaces. The platform's self-service and evidence collection capabilities are intended to enhance audit readiness.

"With the growing complexity of securing identity and access across internal, external, and non-human ecosystems, organizations need to evolve their strategies," Margolies said. "Saviynt's ISPM allows enterprises to observe a broad set of identity security data across the organization, and proactively manage risk. This will help organizations move their identity programs from a compliance exercise to a more effective risk and threat-based identity security approach," Jeff Margolies, Chief Product and Strategy Officer at Saviynt, said.