WHITE PAPER // 2026

The Enterprise Identity & Privilege Defence Index

An empirical analysis of 450+ cyber defence engagements: where session hijacking succeeds, how identity provider tenants get compromised, and why ephemeral privilege is displacing standing admin access.

450+

Engagements

14 min

Read time

Markets

2026

Edition

What the index covers

The index aggregates anonymised findings from enterprise identity and privileged access engagements across banking, healthcare, retail, manufacturing and technology estates in nine markets. Findings are grouped by control domain rather than by vendor, so the conclusions survive a platform change.

check_circleSession hijacking and token theft patterns observed in the field, with the control gaps that enabled them

check_circleIdentity provider tenant compromise vectors, including administrative role sprawl and legacy authentication paths

check_circleStanding privilege prevalence by industry and the measured impact of just-in-time elevation programmes

check_circleService account and hardcoded credential exposure rates, with remediation sequencing that worked

check_circleAccess certification efficacy: completion rates versus actual revocation rates

check_circleDetection coverage gaps for identity-based attack techniques mapped to MITRE ATT&CK

Each section closes with a prioritised action list written for a programme manager rather than an analyst, so findings can be converted into a backlog without translation.

REQUEST THE FULL INDEX

Get the PDF

Submit the form and the document link is emailed to you within minutes, along with the executive summary.

RAPID TALENT MOBILISATION

Want the findings mapped to your own estate?

A practice lead can run a two-hour workshop applying the index framework to your current control set.

Book a workshop Talk to us