https://beckysandberg.com/ https://beckysandberg.com/about https://beckysandberg.com/privacy https://beckysandberg.com/speaking https://beckysandberg.com/writing https://beckysandberg.com/writing/access-reviews-and-certifications https://beckysandberg.com/writing/ai-agent-identity-governance https://beckysandberg.com/writing/ai-does-not-fix-identity https://beckysandberg.com/writing/authentication-is-the-front-door-of-the-operating-model https://beckysandberg.com/writing/authentication https://beckysandberg.com/writing/authorization-logic https://beckysandberg.com/writing/cloud-iam https://beckysandberg.com/writing/conclusion https://beckysandberg.com/writing/customer-identity https://beckysandberg.com/writing/directories-and-identity-stores https://beckysandberg.com/writing/drift-is-what-happens-when-identity-is-not-aligned https://beckysandberg.com/writing/entitlements-are-where-access-becomes-risk https://beckysandberg.com/writing/entitlements https://beckysandberg.com/writing/exceptions-reveal-the-truth-of-the-operating-model https://beckysandberg.com/writing/exceptions https://beckysandberg.com/writing/external-identity-governance https://beckysandberg.com/writing/friction-is-a-governance-problem-not-a-user-problem https://beckysandberg.com/writing/how-ownership-gets-lost https://beckysandberg.com/writing/how-to-assess-identity-operating-model-maturity https://beckysandberg.com/writing/iam-policy-standards-guidelines-and-procedures-must-work-together https://beckysandberg.com/writing/identity-accountability-isnt-a-people-problem https://beckysandberg.com/writing/identity-accountability-starts-with-seeing-the-whole-system https://beckysandberg.com/writing/identity-data-and-source-of-truth-integrity https://beckysandberg.com/writing/identity-implementation-starts-with-shared-responsibility https://beckysandberg.com/writing/identity-truth-first-source-of-truth-data-and-classification https://beckysandberg.com/writing/implement-the-model-in-waves https://beckysandberg.com/writing/introducing-identity-lifecycle-management https://beckysandberg.com/writing/lifecycle-governance-is-never-complete https://beckysandberg.com/writing/lifecycle-rigor-is-how-you-prevent-identity-drift https://beckysandberg.com/writing/measurement https://beckysandberg.com/writing/nonhuman-and-machine-identity https://beckysandberg.com/writing/nonhuman-identities-are-already-your-largest-attack-surface https://beckysandberg.com/writing/ocm-is-what-makes-the-operating-model-stick https://beckysandberg.com/writing/ownership-is-not-optional https://beckysandberg.com/writing/privilege https://beckysandberg.com/writing/privileged-access-is-where-identity-risk-concentrates https://beckysandberg.com/writing/risk-appetite-and-change-appetite-govern-the-implementation-path https://beckysandberg.com/writing/source-registry-governance-and-enforcement-are-distinct-jobs https://beckysandberg.com/writing/technical-debt-is-identity-debt https://beckysandberg.com/writing/tens-of-thousands-of-entitlements-and-the-few-anyone-reviewed https://beckysandberg.com/writing/the-access-that-follows-you https://beckysandberg.com/writing/the-accounts-nobody-hired https://beckysandberg.com/writing/the-cost-of-access-that-never-leaves https://beckysandberg.com/writing/the-cost-of-waiting-for-access https://beckysandberg.com/writing/the-fix-that-never-reached-the-process https://beckysandberg.com/writing/the-operating-model-is-the-system https://beckysandberg.com/writing/theory-to-reality https://beckysandberg.com/writing/when-nobody-knows-what-the-access-does https://beckysandberg.com/writing/where-to-start-when-the-operating-model-is-weak https://beckysandberg.com/writing/who-we-hire-to-lead-identity https://beckysandberg.com/writing/why-rbac-fails https://beckysandberg.com/writing/workflow-integrity https://beckysandberg.com/writing/you-cant-implement-what-you-havent-mapped