IAM Cost Components

Title	IAM Cost Components
Version	`1.0` DRAFT
Summary	This research note inventories known IAM cost components to facilitate the measurement of IAM TCO.
See Also	IAM Cost Measurement Methodology

WARNING: this is a very early draft to get us started. Please provide us with lists of cost components and we will consolidate them here.

Category 1	Category 2	Category 3	Comments
Organizational Costs	General administration		General and administrative (G&A) expenses (headquarters, interest on borrowed money, administration, etc.). This should probably be simply taken “as is” and provided by the accounting department.
	Audit & Control
IT Costs	Hardware Costs	IT Infrastructure
		Hardware Authentication Tokens
		Biometric Systems
	Cloud Costs	IaaS
		PaaS
		SaaS
	Software Costs	IAM Software
		PAM Software
		CIAM Software
		Other Software
	Development Costs
	Integration Costs
	Testing Costs
People Costs	Labour Costs	Direct Labour Costs (IAM dedicated personnel)	Includes: IAM Management IAM Personnel
		Indirect labour costs (other personnel)	IT Service Desk Program and Project Management Receptionists
	Advisory services, outside expertise

Data Management	Data Quality Assurance
Out-sourcing			e.g.:
Cost of inefficiency	Productivity loss costs	Labor cost of users time spent doing recertification, access request and validation
		Cost of support for the support team but for the business who calls
		For CIAM, opportunity cost of having customers calling support etc.
Cost of failure / risk realization	Incidents	The cost incurred by the organization of IAM security related incidents.
	Failed audit costs		Findings and recommendations management costs
	Fines & penalties		Contractual penalties and regulatory fines

Bibliography

CM-6 - Getting issue details... STATUS