A study has found that increased technological and organizational complexity is contributing to new identity risks that security leaders must manage.