Masserini Building the Enterprise Identity Operating Model

A Framework for Identity Governance, Architecture, and Risk
1. Auflage 2026
ISBN: 979-8-8688-2649-8
Verlag: APRESS
Format: PDF
Kopierschutz: 1 - PDF Watermark

E-Book, Englisch, 753 Seiten

Reihe: Professional and Applied Computing

In a hyperconnected, cloud-first operating environment, identity has become the primary control plane for enterprise security, yet in many organizations it remains fragmented, inconsistently governed, and operationally intensive. This book repositions identity not as a discrete access management function, but as a systemic discipline that underpins risk management, regulatory compliance, and digital operations across employees, partners, customers, and third-party ecosystems. The objective is not incremental improvement, but architectural realignment: positioning identity as a governed, measurable, and enforceable enterprise capability.

challenges the legacy view of identity as simply an access permission model. Instead, it defines identity as a continuously evaluated risk construct, requiring centralized visibility, policy orchestration, and life cycle control. At the core of this model is the concept of an Identity Warehouse, an authoritative aggregation layer that normalizes identity data, supports deterministic automation, and enables real-time risk evaluation across the full identity life cycle. This approach establishes a foundation for auditability, policy consistency, and adaptive access enforcement at scale.

The material is grounded in practical architecture: how to design and implement scalable identity ecosystems, integrate with enterprise control layers, and align with evolving regulatory obligations. It addresses the operational realities of modern environments, including hybrid environments, legacy infrastructure, distributed workforces, and third-party dependencies. Just as critically, it elevates identity governance to the executive level, where accountability for identity-related risk must be explicitly owned. Failures in identity are no longer isolated technical events; they are systemic breakdowns with enterprise-wide consequences.

This book is intended for identity architects and security leaders responsible for designing, governing, or transforming identity capabilities. Whether establishing a foundational program or rationalizing a mature environment, it provides a structured framework for evolving identity into a strategic control system that reduces attack surface, enforces policy with precision, and enables the organization to operate securely at scale.

What You Will Learn

• Gain an understanding of the criticality of identity management and the role it plays across both employee and consumer risk mitigation strategies
• Know what an Identity Warehouse is, how it benefits the enterprise, and successful deployment strategies
• Understand how modern identity protocols are driving both interoperability and risk visibility across the entire ecosystem 
• Communicate the overall business value of a centralized identity ecosystem, and how it drives new business features, empowers users, and reduces overall enterprise risk

Who This Book Is For

CISOs, as well intermediate to advanced cybersecurity architects or strategists

Zielgruppe

Professional/practitioner

Autoren/Hrsg.

Masserini, John J.

Inhaltsverzeichnis

Chapter 1 - Enterprise Identity Overview.- Chapter 2 - Enabling Business Transformation.- Chapter 3 - Regulatory Considerations.- Chapter 4 - Identity Resiliency.- Chapter 5 - The technology of Identity Management.- Chapter 6 - Zero Trust Implications.- Part One.- Chapter 7 - Modern Identity Protocols.- Chapter 8 - Passwordless Authentication.- Chapter 9 - Measuring Identity Maturity.- Chapter 10 - Pulling it all together.- Chapter 11 - Agentic Protocols.- Chapter 12: Emerging Standards.- Chapter 13: Zero Trust Architecture. Part Two.- Chapter 14: Buildling an Identity Risk Management Program.- Chapter 15: Operationalizing the Program.- Chapter 16: Identity Management and Corporal Leadership.- Appendix A.- Appendix B.- Appendix C.

Über Autor(innen)

John J. Masserini is an accomplished global CISO and trusted board advisor with 30+ years of experience building enterprise security programs from the ground up. He has a proven record of aligning cybersecurity with business strategy across media, financial services, and tech sectors, specializing in heavily regulated industries including fintech, capital markets, and global telecom. John is a renowned expert in integrating cybersecurity strategy with high-velocity digital innovation, M&A, and cloud transformation. He is recognized for building cyber-resilient, audit-ready environments to drive regulatory compliance, an influential leader skilled in risk governance, cyber resilience, digital transformation, and stakeholder communication, and known for building award-winning teams, mentoring future CISOs, and providing exceptional leadership to high-growth firms.