Free · From the book
Quotable
The Modern Identity Operating Model makes its arguments in full chapters, but some of them fit in a sentence. Readers asked for the sentences. Here they are, with the chapter where each one earns its keep.
Lines from The Modern Identity Operating Model by Becky Sandberg. Tap any line to copy it with attribution.
On Identity
Identity is not a technology problem.
Introduction
Identity is a human discipline.
Chapter 5
Identity begins with people.
Chapter 1
Identity work is emotional work.
Chapter 1
Identity is emotional before it is operational.
Chapter 5
Identity answers who or what this is. Access answers what it is allowed to do.
Chapter 1
Identity is not a project you complete.
Chapter 3
Identity is rarely where anyone thinks to look.
Introduction
Identity does not usually break all at once.
Chapter 1
Identity work is people work.
Chapter 3
On Drift
Drift is the signal that the operating model has fallen out of alignment.
Introduction
Drift is predictability coming apart.
Chapter 4
Drift is not a failure of people. Drift is what happens when no one is responsible for guiding the work.
Chapter 4
On Governance and Ownership
Governance is where identity becomes intentional.
Chapter 5
Governance is not complete when it is published.
Chapter 12
Ownership that is assumed is not ownership.
Chapter 2
An owner who does not know they are the owner is not an owner.
Chapter 6
Ownership does not mean doing all the work. Ownership means being accountable for how the work is done.
Chapter 4
Accountable and responsible are not the same.
Chapter 6
A standard that no one knows about is not a standard.
Chapter 2
An object without an owner is not neutral.
Chapter 24
On Lifecycle
Every identity needs a beginning, a middle, and an end.
Chapter 7
Different identities. Same truth.
Chapter 7
A lifecycle that adds without subtracting is not neutral.
Chapter 7
A disabled account is not a finished one.
Chapter 13
On Access
An access role is not access. A group is not access. A permission is not access.
Chapter 8
Access is the relationship between identity and capability, not a list of permissions.
Chapter 5
Access is where risk becomes visible.
Chapter 5
Access that sits unused is not convenience.
Chapter 8
Access is not theoretical.
Chapter 8
On Technology
The tool is not the product. The workflow is not the product. The operating model is the product.
Chapter 5
Being tool-agnostic is not being tool-indifferent.
Chapter 4
Identity is not a feature beside the work.
Chapter 16
On Measurement and Predictability
You do not measure maturity by counting tools. You measure it by how little the organization is surprised.
Chapter 4
Predictability is the real measure of maturity because predictability is what people experience.
Chapter 4
Predictability is not rigidity.
Chapter 4
A dashboard that only turns red after the damage is done is not measurement.
Chapter 18
A wall of numbers no one acts on is not a measurement program.
Chapter 18
A healthy identity environment is not simply busy.
Chapter 18
On AI and Nonhuman Identity
Human-in-the-loop is not the same as human accountable.
Chapter 10
Accountability is never optional.
Chapter 10
If an agent can act, someone must be able to answer why it exists, what it can do, and when it should stop.
Chapter 7
On the Work and the People
Identity leadership is not improvisation.
Chapter 19
A sponsor who only receives status updates is not sponsoring.
Chapter 17
Identity is not a side function.
Chapter 25
You are not behind. You are starting where the work actually is.
Chapter 1