What is the framework for managing user access and identities?

What is the framework for managing user access and identities?

• A. IAM Governance Body
• B. Strategic Planning
• C. Technical Committee
• D. Governance in IAM

Answer: (D)

Governance in IAM provides the framework for managing user access and identities. It defines who has the authority to decide access, the roles responsible for provisioning and deprovisioning, and the policies that govern authentication, approval workflows, and ongoing access reviews. By linking policies with processes and controls, it ensures that the right people gain the right access to the right resources at the right times, while keeping auditable records for compliance. This overarching approach aligns business objectives with risk management and technical controls, supporting ongoing assurance through role management, least-privilege enforcement, and separation of duties. The other options describe groups or broader planning activities rather than the cohesive framework that guides how identities and access are managed.

Governance in IAM provides the framework for managing user access and identities. It defines who has the authority to decide access, the roles responsible for provisioning and deprovisioning, and the policies that govern authentication, approval workflows, and ongoing access reviews. By linking policies with processes and controls, it ensures that the right people gain the right access to the right resources at the right times, while keeping auditable records for compliance. This overarching approach aligns business objectives with risk management and technical controls, supporting ongoing assurance through role management, least-privilege enforcement, and separation of duties. The other options describe groups or broader planning activities rather than the cohesive framework that guides how identities and access are managed.