RSA has launched a sovereign iam platform tailored for sector-specific needs, promising organizations more granular control over identity and access management [1]. This move comes as identity remains the fastest-growing cybersecurity segment, with buyers demanding modernization and sovereignty amid regulatory and AI-driven threats. According to Futurum Group’s Cybersecurity Market Forecast (2024-2029), Identity and Access Management is set to grow at a 14.6% CAGR, reaching $38.6B by 2029.
What is Covered in this Article
- RSA’s sovereign identity initiative and sector-specific deployment
- Why identity sovereignty is rising on the CISO agenda
- Competitive landscape: Okta, Microsoft Entra, Ping, and sector-focused challengers
- Execution risks and the future of sector-driven IAM architectures
The News
RSA has introduced a sovereign identity deployment model designed to address the unique regulatory and operational requirements of specific sectors such as government, healthcare, and financial services [1]. The solution promises organizations full control over identity data, compliance alignment, and the ability to respond to sector-specific threats. This launch arrives as CISOs face mounting pressure from both regulators and sophisticated attackers exploiting identity as the primary attack vector.
According to Futurum Group’s 2H 2025 Cybersecurity Decision Maker Survey (n=1,008), 73.2% of organizations expect to increase cybersecurity budgets in the next year, with modernization—not compliance—the top spending driver. Identity and Access Management is projected to outpace most security categories, growing from $19.5B in 2024 to $38.6B in 2029.
Analyst Take
RSA’s sector-specific sovereign identity push is a direct response to the convergence of regulatory pressure, AI-driven threats, and the demand for operational sovereignty. Identity is now the control plane for digital trust, and sector nuance is no longer optional.
Sector Sovereignty Is No Longer a Niche Requirement for IAM platform
Regulated sectors such as healthcare and finance have long demanded more than generic IAM solutions. RSA’s move signals that sector-specific sovereignty is becoming a mainstream expectation for an iam platform, not a specialized add-on. Competitors such as Okta and Microsoft Entra have made strides with compliance certifications, but their architectures are still largely horizontal. According to Futurum Group’s Cybersecurity Market Forecast (2024-2029), Identity and Access Management is set to grow at 14.6% CAGR, reflecting both new regulatory mandates and the migration to cloud-delivered iam platform models. The risk for buyers is assuming that horizontal IAM platforms can adapt quickly enough to sector-specific requirements, especially as governments push for data residency and sovereignty guarantees.
The AI Attack Surface Makes Identity the New Battleground for IAM platform
AI-driven social engineering and credential attacks are now the norm, demanding stronger iam platform capabilities. Futurum Group’s 2H 2025 Cybersecurity Decision Maker Survey (n=1,008) found that 62.0% of organizations observed a significant increase in sophisticated AI-driven social engineering attacks. Sovereign identity architectures offer the promise of tighter controls through an advanced iam platform, but also create new complexity—especially when integrating with legacy systems and multi-cloud environments. Vendors that can deliver sector-specific context, rapid threat detection, and compliance automation within an IAM platform will win share. However, execution risk is high: sector-driven IAM requires deep domain expertise, not just configuration templates.
Will Sector-Driven IAM platform Solutions Fragment the Market or Force Consolidation?
RSA’s IAM platform approach could accelerate a split between horizontal IAM platforms and sector-specialized solutions. According to Futurum Group’s 2H 2025 Cybersecurity Decision Maker Survey (n=1,008), 43.0% of buyers plan to expand their security vendor count, signaling a net-expansion phase for the market. Yet, 66% of enterprise software buyers now prefer platform-first strategies (Futurum Group’s 1H 2026 Enterprise Software Decision Maker Survey, n=830). The tension: sector-specific sovereignty may drive short-term fragmentation, but long-term, buyers will demand integration with their broader security and compliance platforms. Vendors unable to bridge sector depth and IAM platform breadth risk irrelevance.
What to Watch
- Sector-First Adoption: Will regulated industries accelerate away from horizontal IAM platforms by 2027?
- Integration Challenge: Can RSA deliver seamless interoperability with cloud and legacy systems, or will complexity stall adoption?
- Vendor Response: How quickly will Okta, Microsoft, and Ping launch credible sector-sovereign offerings?
- Regulatory Escalation: Will new data residency and sovereignty mandates force a wave of IAM replacement projects in the next 18 months?
Sources
1. RSA launches sovereign identity deployment for sectors
Declaration of generative AI and AI-assisted technologies in the writing process: This content has been generated with the support of artificial intelligence technologies. Due to the fast pace of content creation and the continuous evolution of data and information, The Futurum Group and its analysts strive to ensure the accuracy and factual integrity of the information presented. The Futurum Group makes no guarantees regarding the completeness, accuracy, or reliability of any information contained herein. Readers are encouraged to verify facts independently and consult relevant sources for further clarification.
Disclosure: Futurum is a research and advisory firm that engages or has engaged in research, analysis, and advisory services with many technology companies, including those mentioned in this article. The author does not hold any equity positions with any company mentioned in this article.
Read the full Futurum Group Disclosure.
Author Information
This content is written by a commercial general-purpose language model (LLM) along with the Futurum Intelligence Platform, and has not been curated or reviewed by editors. Due to the inherent limitations in using AI tools, please consider the probability of error. The accuracy, completeness, or timeliness of this content cannot be guaranteed. It is generated on the date indicated at the top of the page, based on the content available, and it may be automatically updated as new content becomes available. The content does not consider any other information or perform any independent analysis.
