Start with Identity

60 pieces

Articles

Long-form analysis, opinion, and category roundups. The shorter, more reference-style pieces live in guides; news is in news.

Opinion & analysis

IAM User Experience Design Principles: Building Frictionless, Accessible Identity Systems
Design principles for creating identity and access management systems that users actually want to use—covering frictionless authentication, progressive profiling, self-service identity management, and accessibility.
2026-07-18
12 min
Zero Standing Privileges: Eliminating Persistent Access with JIT, JEA, and Ephemeral Credentials
A practical guide to implementing zero standing privileges through just-in-time access, just-enough access, ephemeral credentials, and workflow automation to dramatically reduce your privileged attack surface.
2026-07-10
11 min
IAM Compliance Guide: Navigating GDPR, CCPA, and Global Privacy Regulations
How privacy regulations like GDPR and CCPA impact identity and access management programs, covering consent management, data subject rights, cross-border identity flows, and building privacy-compliant IAM architectures.
2026-07-01
12 min
Continuous Authentication Best Practices: Balancing Security and User Experience
A practical guide to implementing continuous authentication using behavioral biometrics, session risk scoring, and step-up authentication while maintaining a frictionless user experience.
2026-06-22
10 min
Privileged Access Governance Framework: Policies, Monitoring, and Break-Glass Procedures
A comprehensive framework for governing privileged access, covering PAM policies, session monitoring strategies, credential vaulting best practices, break-glass procedures, and audit trail requirements.
2026-06-15
11 min
IAM for Mergers and Acquisitions: Identity Integration from Day 1 to Full Consolidation
A strategic guide to managing identity through M&A transactions, covering Day 1 access requirements, directory consolidation strategies, culture alignment challenges, and accelerated integration timelines.
2026-06-06
11 min
Access Review and Certification Best Practices: Preventing Rubber-Stamping and Building Effective Governance
How to design access review and certification programs that actually work—moving beyond compliance theater to meaningful governance through micro-certifications, intelligent automation, and rubber-stamping prevention.
2026-05-28
11 min
IAM Incident Response Playbook: Handling Identity Breaches, Compromised Credentials, and Privilege Escalation
A comprehensive playbook for responding to identity-related security incidents, including credential compromise, privilege escalation, and identity infrastructure attacks with forensic investigation guidance.
2026-05-19
12 min
Third-Party Access Management: Governing Vendor, Contractor, and Partner Identities
A comprehensive guide to managing external identities, from vendor access governance and B2B federation to contractor lifecycle management and external identity risk mitigation.
2026-05-10
10 min
IAM Budget Justification Guide: Building the Business Case for Identity Investment
Learn how to quantify IAM ROI, build compelling business cases, and present identity investment proposals that resonate with C-suite executives and board members.
2026-05-01
12 min
IAM Team Structure and Hiring Guide
A comprehensive guide to IAM organizational design — team structures, role definitions, skills matrices, career paths, and the build vs. buy decision for IAM talent in 2026.
2026-04-20
16 min
Managing Technical Debt in IAM: Modernization Without Disruption
Practical strategies for managing technical debt in IAM environments — identifying legacy system risks, planning phased modernization, implementing coexistence patterns, and executing migrations without breaking production.
2026-04-10
13 min
Identity-First Security Strategy: Making Identity the New Perimeter
How to build an identity-first security strategy that treats identity as the primary security perimeter, converging IAM and security operations into a unified architecture for the post-network era.
2026-03-28
13 min
IAM Vendor Selection Framework: From RFP to Production
A structured framework for IAM vendor selection covering RFP templates, evaluation criteria, proof of concept planning, total cost of ownership analysis, and decision-making processes that lead to successful outcomes.
2026-03-14
14 min
Securing Service Accounts: A Complete Best Practices Guide
Comprehensive best practices for managing service accounts — tackling sprawl, lifecycle management, credential rotation, monitoring, and achieving zero standing privileges for non-human identities.
2026-03-04
13 min
IAM Metrics and KPIs That Actually Matter
A practical guide to IAM metrics and KPIs — which ones to track, how to build dashboards, and how to report IAM value to leadership with operational and strategic metrics that drive decisions.
2026-02-21
15 min
Identity Security Posture Management: A Practitioner's Guide
How to implement Identity Security Posture Management (ISPM) to detect configuration drift, enforce identity hygiene, and continuously assess your IAM environment against security baselines.
2026-02-14
12 min
Least Privilege Access: Implementation Strategies and Best Practices
Implement the principle of least privilege with practical strategies for monitoring excess permissions, automated right-sizing, and overcoming organizational resistance.
2026-02-03
11 min
IAM Maturity Model: A Self-Assessment Framework for Identity Programs
Assess your IAM program maturity with a 5-level model covering capability mapping, self-assessment questions, and prioritized improvement strategies.
2026-01-17
11 min
Building a 5-Year IAM Roadmap: Long-Term Strategy for Identity Programs
Create a comprehensive 5-year IAM roadmap with capability maturity planning, phased implementation, stakeholder alignment, and budget strategies for sustainable identity programs.
2026-01-10
11 min

Articles

Opinion & analysis

Category roundups & comparisons