Topic starter
30/07/2026 10:48 pm
TL;DR: ANZ enterprises are using customer identity data to improve customer experiences and support zero trust priorities, according to Ping Identity’s survey report on how CIOs are leveraging customer data. The implication for IAM teams is that customer identity programmes now sit between personalisation, risk, and governance, not just login and profile management.
Editorial analysis by NHI Mgmt Group, based on content published by Ping Identity: “How CIOs Are Leveraging Their Customer Data”.
Key questions
Q: How should organisations govern customer identity data for personalization?
A: Organisations should treat customer identity data like governed source material, not campaign input.
Q: Why can zero trust fail in CIAM programmes even when authentication is strong?
A: Strong authentication does not stop over-sharing of customer attributes.
Q: What are the signs that customer identity governance is too broad?
A: Warning signs include the same customer attributes appearing in multiple downstream systems, inconsistent consent handling, and support or marketing teams using identity data that was collected for authentication.
Practitioner guidance
- Define customer attribute purpose limits Document which customer identity attributes are allowed for authentication, risk scoring, support, marketing, and analytics, and block reuse outside those purposes.
- Apply least privilege to attribute consumers Restrict which applications and teams can read high-value identity attributes, especially where profile data can influence trust decisions or customer support workflows.
- Map data lineage across CIAM flows Trace where customer identity data originates, where it is enriched, and which systems consume it so governance teams can spot uncontrolled propagation.
Bottom line: Customer identity data is being used for both experience and security decisions, which makes CIAM a governance problem as well as an authentication problem.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
30/07/2026 10:55 pm
Customer identity governance is now a cross-functional control plane, not a login function. When enterprises use customer data to drive experience and trust decisions, CIAM stops being a narrow access service and becomes a policy surface shared by security, privacy, and digital teams. That makes attribute scope, reuse, and entitlement boundaries the real control questions. Practitioners should govern customer identity data as a controlled input to business decisions, not as a passive profile store.
A few things that frame the scale:
- 97% of NHIs carry excessive privileges, increasing unauthorised access and broadening the attack surface, according to the Ultimate Guide to NHIs.
- 69% of security leaders agree identity management must fundamentally shift to address agentic AI systems, according to the 2026 Infrastructure Identity Survey.
A question worth separating out:
Q: Why does customer identity matter to zero trust programmes?
A: Customer identity matters because zero trust depends on current, trustworthy context at the moment of decision. If profile data, device signals, or authentication outcomes are stale or inconsistent, policy becomes less reliable. Teams need governed identity signals that can support conditional access without creating hidden assumptions.
👉 Read our full editorial: Customer data, identity, and zero trust in ANZ enterprises