Building the Enterprise Identity Operating Model

Building the Enterprise Identity Operating Model

After 18 months of writing, research, and speaking with many of you, I’m very happy to share the release of my new book:

Building the Enterprise Identity Operating Model: A Framework for Identity Governance, Architecture, and Risk

After decades of building enterprise security programs and working closely with CISOs, security leaders, and identity teams, I’ve come to believe that without a formal, enterprise-wide identity operating model, we cannot adequately secure our organizations.

Identity cannot be treated simply as an access control problem. We must flip the perspective and manage enterprise identity as a true governance and risk management capability – one that connects identity telemetry with technology architecture, corporate policy, and enterprise risk posture across the organization.

This book lays out a practical operating model for doing exactly that: bringing these disciplines together so organizations can manage identity consistently, make better risk decisions, drive business outcomes, and build security into how the enterprise actually operates.

I’m incredibly happy to finally share it.