Which term refers to the discipline of managing IAM programs to ensure they meet organizational needs?

• A. Lifecycle and Transformation
• B. Program Management
• C. Enforcement
• D. Expanding Regulations

Answer: (B)

The main concept being tested is recognizing that overseeing IAM efforts as a coordinated portfolio of initiatives is program management. IAM programs involve multiple projects—such as provisioning, access governance, authentication methods, and stewardship changes—so you need an overarching discipline that handles governance, planning, resource allocation, scheduling, risk, and benefits realization. Program management ensures these projects align with organizational goals, stay within budgets, and deliver measurable outcomes, while coordinating stakeholders and communicating progress at the program level.

The other terms describe narrower ideas. Lifecycle and Transformation focuses on the stages and changes of a specific IAM solution or initiative rather than the broad coordination of multiple efforts. Enforcement centers on applying policies and controls, not the management of an entire IAM program. Expanding Regulations refers to regulatory scope and compliance considerations, not the ongoing discipline of managing a program to meet organizational needs.