RFP Checklist for Identity Security Solutions

Non-human identities now outnumber human users by as much as 109 to 1, expanding the identity attack surface. Is your RFP equipped to address the full scope of identity risk?

This tech brief helps security, IAM, and infrastructure teams evaluate vendors across the identity security lifecycle, aligned with NIST CSF 2.0 and Gartner's expanded ITDR model.

Inside the checklist:

• Requirements across GOVERN, IDENTIFY, PROTECT, DETECT, RESPOND, and RECOVER

• Prioritized criteria: Critical, Important, or Optional

• Coverage of human, non-human, and agentic identities

• Dedicated requirements for Active Directory and Entra ID recovery

Use this checklist to build your next RFP, compare vendors, and validate capabilities during demos.