CA Announces Phase Two of Its IAM r12 Identity Suite Upgrade

| Jun 10, 2008 | Enterprise Security | Competitive Intelligence Report

| Analyst: Andrew Braunberg

Current Perspective: Positive
Vendor Importance: High
Market Impact: Moderate

Event Summary

June 9, 2008 – CA Security Compliance Manager is one of three CA identity and access management (IAM) products announced recently. These three products—CA Identity Manager, CA Access Control Premium Edition and CA Security Compliance Manager—join seven other CA IAM products announced in October and November 2007 as part of CA IAM r12. The IAM r12 products are designed to help manage the identity lifecycle, and provide robust IT security controls, analysis and proof of compliance, and automation of compliance processes.

Analytical Summary

• Current Perspective: Positive on CA’s announced upcoming releases of Identity Manager r12, Access Control r12, and Security Compliance Manager, because together the three releases enhance and extend the CA identity and access control product portfolio. The releases also round out the set of IAM r12 product updates and introductions that CA began last year.

• Vendor Importance: High to CA’s identity business, because these releases will enhance the company’s ability to address the compliance management requirements of its identity management customers and prospects. Access control compliance requirements have been a top pain point for large enterprises for several years now and these releases aim to alleviate that pain through a host of new functionality.

• Market Impact: Moderate on the identity management markets, because CA is a leading player in this space and the entire IAM r12 release helps keep the company competitive across its product line. The company is only just presenting the direction of its identity lifecycle management strategy, however, and competitors will not be shy about raising questions about it.

Recommended Competitor Actions

• In March 2008, Sun announced a GRC strategy. Sun should continue to make the case that access control compliance is the logical starting point for a broader IT GRC solution, which is itself foundational to a comprehensive GRC solution. The company should emphasize the strategic position of role management technology to its solution. The strategy will broadly leverage its own identity management products and services, including the recently acquired role lifecycle management technology from Vaau.

• Oracle should note that its recent release of Oracle Identity Manager 9.1 last February (see “Oracle Updates Identity Manager,” February 21, 2008) supports significant new audit and compliance functionality. This includes attestation capabilities, improved out of the box reporting and exception reports. Oracle should also emphasize its position that role management technology is particularly strategic to both identity and access solutions as well as broader IT GRC solutions and that is why it acquired BridgeStream last year.

• IBM should paint CA as late in understanding the need for better compliance functionality within its IAM suite. IBM should position itself as a leader in IT GRC and note that its Compliance Management suite includes several of its identity management products (i.e., Tivoli Identity Manager, and Tivoli Access Manager for e-business). IBM Tivoli should also note that it fields a product called Security Compliance Manager (SCM), but it is more of a vulnerability management solution. The similar naming is likely to cause some industry confusion and highlights the immaturity of the IT GRC market.owever, and competitors will not be shy about raising questions about it.

Recommended Competitor Actions

• Existing CA IAM customers should be pleased with these announcements. CA continues to show a strong commitment to the identity and access management space and to unify and expand its suite of products. It also continues to address the compliance management requirements of its IAM customers.

• Large enterprises should keep CA on their short list of potential IAM suite vendors. The company remains a leader in the space and the upgrade to the IAM suite over the last year helps the company keep pace in these highly competitive markets.

CLIENTS ONLY

Current Perspective

Competitive Positives and Concerns

Recommended Vendor Actions

| Client access - Full report in Enterprise Security | More information

Top