Which term best describes the processes and policies that guide the management of identity and access within an organization?

• A. Strategy
• B. Governance
• C. Lifecycle and Transformation
• D. Enforcement

Answer: (B)

Governance is the framework that defines the policies, roles, and decision rights that shape how identities and access are managed across an organization. It covers who can authorize access, how requests are approved, how access is reviewed and certified, and how compliance and risk are monitored, ensuring consistency with business objectives. This makes governance the best fit for describing the processes and policies guiding identity and access management.

Strategy, while related, describes the overall direction and plans rather than the ongoing policy framework and oversight. Lifecycle and Transformation focuses on the operational stages of managing identities and changes to systems, not the governance structure that governs them. Enforcement deals with putting policies into practice, but governance dictates what those policies are and how they are governed.