Media releases are provided as is by companies and have not been edited or checked for accuracy. Any queries should be directed to the company itself.

Passwords Have Failed as Effective Identity Management Tools, According to META Group; Research Finds Both Organisations and Individuals Responsible for Password Ineffectiveness

  • 17 September, 2004 12:08

<p>SYDNEY, Australia - Sept. 17, 2004 - Most customer password implementations and policies are ineffective, as a result of organisational and individual failings as well as a lack of truly viable solutions from vendors, according to META Group (Nasdaq: METG), a leading provider of information technology (IT) research, advisory services, and strategic consulting.</p>
<p>At the enterprise level, META Group finds that most organisations devote too much time developing convoluted policies for accessing resources that do not require significant protection, or they spend too little time protecting crucial applications. Further, organisations have been unable to strengthen password protection for mission-critical resources in a cost-effective manner. These organisations have also been cited by independent auditors for non-compliance with new and existing regulations that may be supported by identity management services. Finally, research suggests that there are inadequate processes, skill sets, training, tools, awareness, and communication among business users and the IT organisation, rendering password protection systems both vulnerable and underutilized.</p>
<p>Password failure is also rooted in end-user issues. According to META Group analysts, the password as an identification and authentication method is ineffective when individuals have too many passwords to maintain. However, the issue goes beyond the sheer volume of
passwords, a problem initially created by an industry of disparate vendors with differing identity management systems and methods.</p>
<p>"The issue with password protection isn't just a number issue. Rather, from a cultural standpoint, many individuals do not believe the value of the password reflects the value of the assets it protects," said Earl Perkins, vice president with META Group's Security &amp; Risk Strategies advisory service. "Time and again, the password is not afforded deserved protection. This renders passwords ineffective regardless of synchronization, best practices, or management efforts."</p>
<p>Perkins suggests customers are waiting for and expecting the software community to provide them with a solution, rather than the management applications and best practices that have been favored to date. However, solving the password puzzle has not proven a profitable business and, for that reason, vendors have had little interest helping customers heal what they believe are "self-inflicted wounds."</p>
<p>Despite the lack of incentive for vendor involvement, there have been efforts to address the growing identity management problem. Most of these have focused on the classic "single sign-on" solution, which involves creating a single identifier and password for most applications and resources for each user. However, while single sign-on may solve some password issues, META Group believes that it will also inject new problems regarding the balance between authentication and authorisation.</p>
<p>META Group believes the ultimate solution must address three simple principles about authentication to be successful:</p>
<p>1. Individuals want to know that their identity is secure when they identify themselves to gain access</p>
<p>2. Individuals want to identify themselves simply and consistently, without tricks, aids, mnemonics, etc.</p>
<p>3. Individuals want to understand the value of what they are accessing in relation to how they access it</p>
<p>About META Group</p>
<p>META Group is a leading provider of information technology research, advisory services, and strategic consulting. Delivering objective and actionable guidance, META Group's experienced analysts and consultants are trusted advisors to IT and business executives around the world. Our unique collaborative models and dedicated customer service help clients be more efficient, effective, and timely in their use of IT to achieve their business goals. Visit for more details on our high-value approach.</p>
<p>Jessie Shepherd
Markom Marketing
<p>Peter Carr, Vice President, Director Operations
META Group

Most Popular

Father’s Day Gift Guide

Brand Post

Most Popular Reviews

Join the newsletter!


Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.

Latest Articles


PCW Evaluation Team

Luke Hill


I need power and lots of it. As a Front End Web developer anything less just won’t cut it which is why the MSI GT75 is an outstanding laptop for me. It’s a sleek and futuristic looking, high quality, beast that has a touch of sci-fi flare about it.

Emily Tyson

MSI GE63 Raider

If you’re looking to invest in your next work horse laptop for work or home use, you can’t go wrong with the MSI GE63.

Laura Johnston

MSI GS65 Stealth Thin

If you can afford the price tag, it is well worth the money. It out performs any other laptop I have tried for gaming, and the transportable design and incredible display also make it ideal for work.

Andrew Teoh

Brother MFC-L9570CDW Multifunction Printer

Touch screen visibility and operation was great and easy to navigate. Each menu and sub-menu was in an understandable order and category

Louise Coady

Brother MFC-L9570CDW Multifunction Printer

The printer was convenient, produced clear and vibrant images and was very easy to use

Edwina Hargreaves

WD My Cloud Home

I would recommend this device for families and small businesses who want one safe place to store all their important digital content and a way to easily share it with friends, family, business partners, or customers.

Featured Content

Product Launch Showcase

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?