Identity and vulnerability management were analyzed in a recent report.