This week, MightyID had the opportunity to join security leaders and risk professionals at the 2025 Gartner Security & Risk Management Summit. Hosted annually by Gartner, Inc., this premier event brings together CISOs, security practitioners, and risk management leaders to explore the latest strategies, technologies, and insights shaping enterprise security today. It was an energizing and insightful few days, filled with conversations about the future of cybersecurity, resilience, and trust.
Comparing to IAM-Specific Experiences
This year, Gartner’s Security & Risk Management Summit took place just a few days after Identiverse, a conference deeply rooted in the identity space where speaker sessions and attendees are focused on innovations and trends in identity.
The similarities and differences between the two conferences give us a clue into the trends and direction of the IAM industry as a whole.
Similarity: Emphasis on AI
A strong industry-wide emphasis on AI was prevalent at both conferences, from startup demos to major keynotes, AI was a transformational force.
AI continues to be top of mind for the attendees, and not surprisingly, the vendors were happy to position their pitches around AI. May CISOs I interviewed are still a bit skeptical but hopeful AI can give them some relief with regards to the volume of data, the volume of alerts, and ultimately the speed at which the data is gathered, correlated, and analyzed
Vendors showcased how AI is embedded into their platforms to drive efficiency, improve decision-making, and reduce response times. While the use cases varied, the message was consistent: artificial intelligence will play a central role in shaping the future of cybersecurity—and identity is no exception.
The persistence of AI in both conferences emphasizes that as a “trend”, AI is here to stay and is penetrating every aspect of technology, including identity. For more on what that means to IAM professionals and CISOs, see our Identiverse retrospective here.
Difference: Familiarity with IAM Resilience
One of the biggest takeaways for our team was the subtle but noticeable gap in awareness around Identity and Access Management (IAM) Resilience. Compared to last week’s Identiverse conference—where the majority of attendees were IAM professionals well-versed in identity security—the Gartner crowd of security professionals was just beginning to explore how IAM fits into their broader resilience strategies.
This indicates a growing trend in IAM Resilience; targeted experts in the field are recognizing IAM Resilience as the urgent need that it is. The broader security and risk crowd is familiar with the concept, yet still unaware of the solutions available. As the broader market follows the niche early adopters, we will see further growth in the need and urgency of the topic.
This highlighted a critical opportunity: organizations are increasingly investing in cybersecurity, but many still overlook the risks of downtime, misconfigurations, and data loss within their identity infrastructure. As more businesses rely on cloud-based identity providers like Okta, ensuring that IAM environments are backed up, recoverable, and resilient to incidents must become a standard part of enterprise risk management.
What Comes Next? After the Conference.
At MightyID, we’re proud to be leading the conversation on IAM Resilience. We’re encouraged to see growing interest as security leaders look for practical ways to close the gaps in their identity strategies.
We look forward to continuing these important discussions—and helping organizations build a more secure, resilient future.
