Which term in IAM governance describes the involvement of HR, application owners, and information security?

Which term in IAM governance describes the involvement of HR, application owners, and information security?

• A. Federation solutions
• B. Data management governance
• C. Emerging security solutions
• D. Future scalability requirements

Answer: (B)

In IAM governance, coordinating how data is owned, protected, and used across the organization requires bringing together people from HR, application owners, and information security. This is the realm of data management governance. It defines who is responsible for data assets, the policies and standards for data handling, and the controls that ensure data and access are managed consistently—across employee lifecycle events (like onboarding and offboarding handled by HR), application-specific data needs identified by app owners, and security policy enforcement by information security. This collaborative governance ensures that access rights align with how data should be managed and protected. Federation solutions focus on linking identities across domains for authentication and authorization, not on internal stakeholder coordination. Emerging security solutions is too vague and not a formal governance term. Future scalability requirements deal with capacity and performance planning rather than governance of data ownership and roles.

In IAM governance, coordinating how data is owned, protected, and used across the organization requires bringing together people from HR, application owners, and information security. This is the realm of data management governance. It defines who is responsible for data assets, the policies and standards for data handling, and the controls that ensure data and access are managed consistently—across employee lifecycle events (like onboarding and offboarding handled by HR), application-specific data needs identified by app owners, and security policy enforcement by information security. This collaborative governance ensures that access rights align with how data should be managed and protected.

Federation solutions focus on linking identities across domains for authentication and authorization, not on internal stakeholder coordination. Emerging security solutions is too vague and not a formal governance term. Future scalability requirements deal with capacity and performance planning rather than governance of data ownership and roles.