Pillar Three: Identity

Identity is the foundation of secure and accountable technology systems. Every organisation must be able to determine who is accessing its systems, what they are authorised to do, and who is responsible for every digital action. Effective identity management helps ensure that the right people have the right level of access to the right information at the right time, while preventing unauthorised access and reducing organisational risk.

Identity extends beyond usernames and passwords. It includes authentication, role based access, user lifecycle management, and clear accountability for digital activities.

Organisations that manage identity effectively are better able to protect sensitive information, strengthen cybersecurity, support compliance, and maintain trust among staff, partners, and the communities they serve.

This pillar provides practical guidance for establishing strong identity management across an organisation.

Through real world scenarios, reflective questions, implementation guidance, and practical checklists, organisations can assess their current identity practices and identify the steps needed to ensure that every user, system, and digital interaction is secure, appropriately authorised, and fully accountable.