Which term captures the legal requirements that compel organizations to adopt IAM practices to ensure compliance?

• A. Expanding Regulations
• B. Strategy
• C. Lifecycle and Transformation
• D. Access Request and Approval

Answer: (A)

The main idea here is that external legal and regulatory demands drive organizations to implement and strengthen identity and access management. Regulations and standards continually expand, creating new obligations around who can access what, how access is granted and reviewed, and how access events are audited. This ongoing growth in regulatory requirements is what compels teams to adopt IAM practices to ensure compliance. IAM provides the concrete controls and evidence regulators expect—strong authentication, least-privilege access, automated provisioning and deprovisioning, regular access reviews, and detailed audit trails—so organizations can demonstrate compliance during audits and avoid penalties. The other options describe internal planning or specific workflows rather than capturing the external mandate to comply.