Name the sponsor, program owner, and identity decision rights
Govern identity scope and ownership
Demo data. Any changes do not save and are reset on refresh.
Identity Access Modernization
- Organization
- Demo
- Unit
- Not attached
- Site
- Sydney
PERT
Critical pathComplete→Dependencies
Define the workforce, contractor, service, and privileged identity scope
Govern identity scope and ownership
Identify authoritative identity sources and account owners
Govern identity scope and ownership
Define joiner, mover, and leaver handling goals
Control identity lifecycle and operations
Establish a repeatable privileged-account inventory process
Protect authentication and privileged access
Separate daily-use and administrative identities
Protect authentication and privileged access
Set authentication requirements by access risk
Protect authentication and privileged access
Establish phishing-resistant authentication for high-risk access
Protect authentication and privileged access
Define emergency-access accounts and recovery controls
Protect authentication and privileged access
Establish service-account ownership and credential lifecycle rules
Control identity lifecycle and operations
Establish third-party identity sponsorship and expiration rules
Control identity lifecycle and operations
Define a protected path for administrative access
Protect authentication and privileged access
On critical path
Establish privileged-secret rotation and revocation rules
Protect authentication and privileged access
On critical path
Establish periodic access and entitlement reviews
Control identity lifecycle and operations
Centralize important authentication and privilege event logs
Protect authentication and privileged access
Define identity incident triage, containment, and recovery
Protect authentication and privileged access
Pilot the controls with one bounded user or administrator group
Protect authentication and privileged access
On critical path
Define operating metrics, review cadence, and transition to routine operations
Control identity lifecycle and operations
On critical path
Critical path
4 remaining, Define a protected path for administrative access, Next, January 1, 2027
Dependencies
No handoffs need review
Next handoff
Establish third-party identity sponsorship and expiration rules, Third-party access owner, December 7, 2026
Recommendations
| Actions | ||||||
|---|---|---|---|---|---|---|
| No active recommendations for this view. | ||||||
- No active recommendations for this view.