Which term corresponds to the plan of action designed to achieve IAM goals and address related challenges?

Which term corresponds to the plan of action designed to achieve IAM goals and address related challenges?

• A. Access Request and Approval
• B. Strategy
• C. Provisioning and De-Provisioning
• D. Governance

Answer: (B)

Understanding strategy in IAM is about the plan of action that guides how to reach the organization’s IAM goals and address the challenges that come with managing identities and access. A strategy sets the overall direction, priorities, and roadmap for IAM efforts, aligning initiatives with business objectives, risk tolerance, and regulatory requirements. It explains why certain controls are put in place, how resources will be allocated, and what success looks like over time, providing the framework for decisions about policies, technical architecture, governance, and the allocation of roles and responsibilities. The other terms describe specific components or activities within the IAM landscape but do not by themselves define the overarching plan. Access Request and Approval refers to the workflow for granting access, provisioning and de-provisioning covers lifecycle management of user accounts and entitlements, and governance focuses on policy creation, oversight, and decision rights. While essential, these elements operate within the strategy and do not replace the strategic plan that coordinates and drives the whole IAM program.

Understanding strategy in IAM is about the plan of action that guides how to reach the organization’s IAM goals and address the challenges that come with managing identities and access. A strategy sets the overall direction, priorities, and roadmap for IAM efforts, aligning initiatives with business objectives, risk tolerance, and regulatory requirements. It explains why certain controls are put in place, how resources will be allocated, and what success looks like over time, providing the framework for decisions about policies, technical architecture, governance, and the allocation of roles and responsibilities.

The other terms describe specific components or activities within the IAM landscape but do not by themselves define the overarching plan. Access Request and Approval refers to the workflow for granting access, provisioning and de-provisioning covers lifecycle management of user accounts and entitlements, and governance focuses on policy creation, oversight, and decision rights. While essential, these elements operate within the strategy and do not replace the strategic plan that coordinates and drives the whole IAM program.