New study highlights challenges in ITDR adoption by firms

Quest Software has released findings from a study highlighting the adoption challenges and benefits of Identity Threat Detection and Response (ITDR) among organisations.

According to the report, which was based on a survey of 373 IT professionals from across a range of diverse industries, ITDR practices are gaining traction as businesses seek to bolster their defences against identity-related threats targeting architectures such as Microsoft Active Directory and Entra ID. ITDR aims to enhance an organisation's capacity to fend off, detect, investigate, and respond to identity-based threats.

The survey revealed that 84% of companies engaging in ITDR initiatives have experienced some level of benefit even when ITDR is not fully established. Approximately 36% of those surveyed indicated that their expectations have been met or surpassed, showcasing ITDR's potential when integrated effectively.

Despite its benefits, the implementation process poses significant challenges. The primary obstacles include integration with current systems (69%), budget constraints (61%), and a lack of specialised expertise (59%). These factors highlight the complexity involved in embedding ITDR within existing security frameworks.

Low ITDR maturity levels within companies remain a concern, according to the report. This trend is linked to the lack of a concentrated strategic focus on identity threat prevention and recovery. Only 50% of businesses have adopted identity infrastructure security solutions, just 31% conduct tests for their identity disaster recovery plans, and a mere 34% have their access management teams primarily accountable for ITDR efforts.

The study underlines a gap in executive comprehension of ITDR's value as a significant hurdle, which impedes adequate funding. Almost half of the respondents cited this as a challenge, suggesting that more awareness and understanding at the executive level could facilitate better resource allocation.

John Hernandez, President, and General Manager at Quest Software, commented on the findings, "One study participant mentioned that their executives believe multifactor authentication alone is sufficient for ITDR. However, ITDR extends far beyond general access management, encompassing all aspects of identity security. Our research demonstrates that an ITDR strategy is proving highly effective in addressing identity-based threats. The challenge now is to educate organizations so that identity management and security teams receive the attention and funding they need."

The insights indicate a clear necessity for businesses to focus more strategically on enhancing ITDR across all levels to strengthen their overall cybersecurity posture in an increasingly identity-threatened environment.

The research is based on a survey of 373 IT professionals across several vertical industries.