As organizations continue to adopt AI and agentic technologies, many are discovering that their resilience and identity-management practices have not kept pace. To better understand where organizations stand today, Commvault co-sponsored IDC research on the current state of cyber resilience. Commvault is pleased to announce the findings in a new IDC White Paper, Resilience Operations: The Discipline that Makes Readiness Provable.
The research was conducted among 539 IT and resilience decision-makers across North America (80% in the United States and 20% in Canada), with approximately 85% reporting they have experienced a cyber incident. IDC found that 90% of respondents believe they need to improve identity-management capabilities to address risks introduced by agentic AI systems. Identity management encompasses the governance of both human and non-human identities and their access to systems and data throughout their lifecycle—from creation to decommissioning.
The research also found that:
- 58.7% of respondents said their identity-management approach requires significant improvements or a complete overhaul.
- 26.7% of respondents reported having dynamic role-based access control (RBAC) supporting AI and analytics.
- A quarter (24.7%) have documented and tested their Active Directory and Microsoft Entra ID recovery capabilities.
- Almost all (98.4%) said stronger collaboration is needed between IT and security teams, with half (49.7%) indicating major improvements are required.
- More than half (57.7%) have not fully defined their Minimum Viable Business (MVB)—the critical functions required to continue operations during a disruption.
- Many organizations also continue to face gaps in recovery orchestration, cleanroom capabilities, and overall cyber-resilience preparedness
In conjunction with this expansive research project, we will also be introducing the new IDC Cyber Readiness Assessment, an interactive tool designed to help organizations evaluate cyber resilience for an AI-driven future. Stay tuned for more on the assessment, or reach out to your account owner to find out more.
Read the Full Report Highlights from the Commvault release
