Which term corresponds to the description 'Plan to align identity management with business needs'?

• A. IAM Strategy
• B. Capability Maturity Model
• C. Access Request Form
• D. Access Controls

Answer: (A)

The main idea being tested is how to describe a formal plan that guides identity and access management to serve business objectives. This phrase is best captured by an IAM strategy—a deliberate plan that sets goals, defines governance, outlines a roadmap, and identifies the people, processes, and technologies needed to align identity management with what the business needs, risks, and compliance requirements. It frames target architecture, prioritizes initiatives, and establishes metrics to measure success, ensuring IAM capabilities actually support the organization’s goals.

The other concepts don’t fit as precisely. A capability maturity model is about assessing and improving processes in general, not specifically about aligning IAM with business needs. An access request form is a procedural document for requesting access. Access controls are the mechanisms that enforce permissions, not the planning document that aligns IAM with business objectives.