Pathlock, a provider of identity and access governance technology, and KPMG LLP, a professional services firm offering cybersecurity, compliance, risk and transformation services, announced an alliance on August 3 focused on identity security and access risk across complex, multi-application environments. Pathlock said the relationship will target large enterprises running billions of dollars in transactions through ERP and other business-critical systems.
The alliance combines Pathlock’s identity and access governance platform with KPMG’s cybersecurity, compliance, risk and transformation capabilities. The companies said the work will address access governance as organizations modernize core business systems, including through cloud migrations, application consolidation, AI agents, automation and business-process changes. These initiatives can affect who or what can access sensitive workflows, approve transactions, elevate privileges and create audit exposure.
Under the arrangement, Pathlock can become part of KPMG-led SAP risk transformation and technology modernization projects. KPMG brings experience across regulatory and compliance areas including SOX, HIPAA, PCI DSS and GDPR, while Pathlock provides technology for identity security and access risk management.
Mick McGarry, Principal, Cybersecurity Services at KPMG LLP, said the firm is focused on helping clients use AI while maintaining cybersecurity resilience. He said combining identity governance with behavioral insights and cybersecurity frameworks can help organizations manage access and transaction risk.
Damon Tompkins, CEO of Pathlock, said the alliance brings together KPMG’s compliance, risk, and transformation expertise with Pathlock’s technology to help organizations modernize identity access and governance programs with cost savings and confidence.
The companies are also addressing the expansion of non-human identities as AI agents and automated processes become part of enterprise environments. Pathlock said its platform is designed to govern identities and transactions across SAP, Oracle and Workday environments.
For organizations using SAP, the focus extends beyond employee access. AI agents and other automated identities can interact with business systems, workflows and transactions, requiring organizations to account for the permissions assigned to those identities and the activities they perform.
Pathlock said its platform is used by Global 2000 organizations operating complex SAP, Oracle and Workday environments and is designed to govern identities and transactions across those systems.
The alliance is structured around joint execution, with KPMG incorporating Pathlock’s identity security and access risk capabilities into relevant client engagements. The companies did not disclose financial terms for the agreement.
