One thing organisations get wrong about Cyber & IAM

Agreed, Tim. Just to add my perspective on delivery, weak identity and access management can quietly become a delivery risk. It affects who can access information, who can approve decisions, who can make changes, and how much trust we can place in the project environment.

In project delivery, we often talk about scope, schedule, cost, risk, and governance. But digital trust is becoming part of that same control environment. If access is unclear, ownership is unclear, or accountability is unclear, then delivery confidence is also weakened.

I personally think that the important shift is to treat IAM not as a late-stage security checklist, but as part of how organizations design clarity, control, and resilience from the start.