THREAT‑WATCH
Glossary
Identity and Access Management (IAM)
The systems and policies that control who can access what, across every application and system in an organization.
IAM covers account provisioning and deprovisioning, authentication, and authorization, ensuring people have access to exactly what their role requires, no more. Weak IAM, such as former employees retaining access, or overly broad permissions, is a recurring root cause in breach investigations. Modern IAM increasingly centers on least-privilege access and continuous verification rather than one-time login checks.