Ensure you have the latest features and security patches.
Current Situation: IAM vendors release product patches and major version upgrades continuously. If organizations wait too long, not only will they miss out on features and security patches, but they might not be able to open support tickets with the vendor.
Impact: The impact of an upgrade or patch from the security or feature set perspective should get evaluated on a case-by-case basis. But the ability to open a service ticket with a vendor is a must-have. Fortunately, vendors provide ample time, typically 1-2 years, before older versions become unsupported.
Resolution: At GCA, we don't immediately advise our customers to upgrade and patch after they become available, except for critical security reasons. But we absolutely recommend our clients stay on supported versions of the IAM software. We recommend letting new versions settle for a few months before adopting them.