If you are a fan of security controls, then you’re in luck, because there are plenty out there to choose from. There are those, such as the SANS Institute, who have attempted to rein in the proliferation of control models and guidelines from various institutes and agencies with their Critical Security Controls.
Identity and Access ManagementUltimately, it’s up to each organization to decide for themselves via coordination between the business, IT and auditors as to whether the controls that are in place are adequate.
Read more at – Is Your Identity and Access Management Out of Control?