Measuring the Cost of IAM - Cost Categories

Title	Measuring the Cost of IAM - Activities & Costs
Version	`1.0` DRAFT
Summary	This research note inventories known IAM costs and expenditures to facilitate the measurement of IAM costs.
See Also	IAM Cost Measurement Methodology
TODO	Clean up these rough notes. Provide systematic literature references.

The indirect costs of the IAM processes for users

Incidents

Cost Category 1	Cost Category 2	Cost Category 3
General administration			General and administrative (G&A) expenses (headquarters, interest on borrowed money, administration, etc.). This should probably be simply taken “as is” and provided by the accounting department.
IT Costs	Hardware Costs	IT Infrastructure
		Hardware Authentication Tokens
		Biometric Systems
	Software Costs	IAM Software
		PAM Software
		CIAM Software
		Other Software
	Integration Costs
People Costs	Labour Costs	Direct Labour Costs (IAM dedicated personnel)
		Indirect labour costs (other personnel)	IT Service Desk Program and Project Management
	Advisory services, outside expertise
Out-sourcing
Cost of inefficiency	Productivity loss costs	Labor cost of users time spent doing recertification, access request and validation
		Cost of support for the support team but for the business who calls
		For CIAM, opportunity cost of having customers calling support etc.
	Incidents	The cost incurred by the organization of IAM security related incidents.
	Failed audit costs

Bibliography