Identity Access Modernization

Identify authoritative identity sources and account owners

Waiting onIA-P1-M02

Define joiner, mover, and leaver handling goals

Waiting onIA-P1-M03

Establish a repeatable privileged-account inventory process

Waiting onIA-P1-M02

Separate daily-use and administrative identities

Waiting onIA-P3-M05

Set authentication requirements by access risk

Waiting onIA-P1-M02, IA-P1-M03

Establish phishing-resistant authentication for high-risk access

Waiting onIA-P3-M07

Define emergency-access accounts and recovery controls

Waiting onIA-P3-M07

Establish service-account ownership and credential lifecycle rules

Waiting onIA-P1-M03

Establish third-party identity sponsorship and expiration rules

Waiting onIA-P1-M03

Define a protected path for administrative access

Waiting onIA-P3-M06, IA-P3-M07

Establish privileged-secret rotation and revocation rules

Waiting onIA-P2-M10, IA-P3-M12

Establish periodic access and entitlement reviews

Waiting onIA-P1-M03, IA-P2-M04, IA-P3-M05

Centralize important authentication and privilege event logs

Waiting onIA-P1-M03, IA-P3-M07

Define identity incident triage, containment, and recovery

Waiting onIA-P3-M09, IA-P3-M15

Pilot the controls with one bounded user or administrator group

Waiting onIA-P3-M08, IA-P3-M12, IA-P3-M13, IA-P2-M14, IA-P3-M16

Define operating metrics, review cadence, and transition to routine operations

Waiting onIA-P2-M11, IA-P3-M17

Define the workforce, contractor, service, and privileged identity scope

Name the sponsor, program owner, and identity decision rights