Which committees oversee IAM policies and strategies?

Which committees oversee IAM policies and strategies?

• A. Advisory Committee
• B. IAM Governance Body
• C. Technical Committee
• D. Executive Committee

Answer: (B)

Governance and policy oversight for IAM is the main idea. A formal IAM Governance Body is responsible for setting IAM policies, standards, and the overall strategic direction. It defines policy lifecycles, approves roadmaps and budgets, and monitors compliance through metrics and audits. This body brings together security, IT, risk, privacy, and business units to ensure IAM aligns with business objectives and regulatory requirements, resolves policy exceptions, and approves changes. Other committees have valuable roles but focus elsewhere: an advisory group provides input without formal policy approval; a technical committee concentrates on implementing standards and technical details rather than governance; and an executive committee may oversee broader strategic direction but not the specific governance of IAM policies.

Governance and policy oversight for IAM is the main idea. A formal IAM Governance Body is responsible for setting IAM policies, standards, and the overall strategic direction. It defines policy lifecycles, approves roadmaps and budgets, and monitors compliance through metrics and audits. This body brings together security, IT, risk, privacy, and business units to ensure IAM aligns with business objectives and regulatory requirements, resolves policy exceptions, and approves changes.

Other committees have valuable roles but focus elsewhere: an advisory group provides input without formal policy approval; a technical committee concentrates on implementing standards and technical details rather than governance; and an executive committee may oversee broader strategic direction but not the specific governance of IAM policies.