Skip to content Skip to footer

Loading Results

Identity and Access Management

Secure the digital identities that power your digital services and control access to your systems.

‘Digital Identities’ are the foundational components of your digital services, representing critical information about people, data and devices. With the growing dependency on digital services causing businesses to expose this information to cyber threats, securing your digital identities has never been more critical.

What is Identity and Access Management (IAM)?

Identity and Access Management (IAM) is an essential cyber security tool that enables you to manage digital identities and user access within your IT environment. Using IAM, organisations can restrict and monitor access to data, systems and resources, helping to reduce cyber risk and protect critical information.

Identity and Access Management (IAM) services are fundamental to security by providing management and governance capabilities and building on the principle of security by design. Beyond digital trust and security, it provides sustainable business value by improving the efficiency of your digital interactions with customers, employees, contractors, business partners and your supply chain.

What questions should you be asking?

  • Do you know who has access to critical systems and data?
  • How will you demonstrate compliance with GDPR, the NIS Directive and PSD2?
  • How mature are your IAM controls?
  • How well do your IAM services support your digital services?
  • Do you need to reduce IT operational costs for access fulfilment and governance?
  • How can IAM be exploited to support your business and digital transformations?
  • Are you delivering a compelling digital customer experience without compromising on security?

Our Identity and Access Management (IAM) services

PwC provides best in class Identity and Access Management advisory, assurance and delivery services that provide truly distinctive value and enable our clients to better deliver and optimise their digital business services and processes.

Our service approach brings together business knowledge, technical expertise and industry experience to deliver business value with IAM and place digital identity at the centre of your business services and transformation.

Our aim is to help clients address all of their IAM related business challenges, ranging from supporting your digital transformation, securing and governing access, managing access during mergers and divestments, enabling a seamless customer experience, advising on more effective risk based governance and more.


Review your IAM capabilities with our IAM Maturity Assessments or assess your IAM solution/s with vendor specific health checks and configuration reviews. 


Define your target IAM capabilities, policies and controls that are aligned to your broader business and digital priorities with our IAM Strategy and Target Operating Model.


Implement your IAM services with our team's experience in design, development and configuration and deployment of leading IAM vendors and solutions.

Why PwC


  • We are independent from technical providers and specific technological solutions.
  • Our team brings insight across market offerings to help you realise the maximum value across vendors and specialists.

Proven expertise

  • We have proven skills and knowledge across a wide range of business risk, regulatory and cyber security disciplines required to deliver such projects.
  • Our team brings decades of IAM experience across business models and verticals, providing a one stop shop for advice and services.

Industry recognition

  • Certified by the UK National Cyber Security Centre.
  • Certified by CREST, the UK industry body for a cyber security marketplace of regulated professional services, which validates PwC’s demonstrable level of assurance provided to our clients.
  • Rated as a leader in The Forrester Wave™: Global Cybersecurity Consulting Providers, Q2 2019

Privacy and security by design

  • We design solutions with security and privacy built in to comply with regulatory requirements.
  • Our team operates as part of a wider cyber offering of over 250 UK cyber professionals keeping digital trust at the centre of our advisory.


  • We have delivered IAM services in many similar contexts with prepackaged methodologies and deliverables based on best practice.
  • Our team is part of a 3000+ identity specialist network across PwC, with the sharing of insights from hundreds of identity engagements every year.


Follow us

Required fields are marked with an asterisk(*)

By submitting your information, you acknowledge that we may send you business insights that we consider relevant to your interests. Please see our privacy statement for details of why and how we use personal data and your rights (including your right to object and to stop receiving marketing communications from us). To stop receiving marketing communications from us, click on the unsubscribe link in the relevant email received from us or send an email to

Contact us

Derek Gordon

Derek Gordon

Identity & Access Management - Director, PwC United Kingdom

Tel: +44 (0)7843 333935