Guides & Playbooks
Strategic thinking and practical execution for the identity-centric, AI-enabled enterprise.
Security architecture is being rebuilt around identity, Zero Trust, and AI. These resources are for the leaders and architects doing that work. The Strategic Guides explain how the enterprise is changing and what the target architecture should look like. The Playbooks turn that thinking into phased, practical plans you can run. Read them on their own, or pair a guide with its playbook to go from strategy to execution.
Strategic Guides
-
Identity as the New Control Plane
Why identity has replaced the network perimeter as the center of enterprise security. Covers context-aware access, delegated authority, and how to design an identity control plane.
-
From IAM to Identity Fabric
How to move from fragmented, app-by-app IAM to one integrated fabric for authentication, authorization, policy and governance. Covers workforce, customer, machine, workload and agent identities.
-
The Enterprise Zero Trust Reference Architecture
A reference model for identity-centric, policy-driven Zero Trust. Covers policy decision and enforcement, segmentation, devices, workloads, data, and privileged access.
-
The Human–Machine–Agent Identity Model
A model for identity, authority and accountability when people, machines and AI agents all act inside the enterprise. Covers delegation versus impersonation, identity propagation, and least privilege for agents.
-
AI Security for the Enterprise
How to secure the whole AI system, not just the model: data, agents, outputs and actions. Covers the AI threat model, human oversight, AI security operations, and supply chain risk.
-
The Security Architecture of the AI-Enabled Enterprise
A layered security architecture for an enterprise where humans, machines, agents, data, applications and AI all operate together. Covers identity, Zero Trust, policy, telemetry, operations and resilience.
Playbooks
-
Enterprise Identity Transformation
A phased plan for modernizing enterprise identity, from current-state assessment and prioritization to roadmap and workstreams. Covers authorization, machine identity, and privileged access.
-
Zero Trust Transformation
A step-by-step plan for putting Zero Trust into practice across access, trust, segmentation and policy. Covers trust assessment, a prioritized roadmap, and application and network transformation.
-
Identity Threat Detection & Response
A practical guide to detecting, investigating, containing and recovering from identity-based attacks. Covers telemetry assessment, a detection catalog, incident severity, and detection engineering.
-
Security Architecture Modernization
A plan to assess and modernize enterprise security architecture across identity, Zero Trust, network, cloud, applications, AI and security operations. Builds toward continuous control.
-
AI Agent Identity & Access
A phased playbook for giving AI agents real identities, delegated authority and least-privilege access. Covers agent inventory, credentials, tool and connector access, session controls, and lifecycle management.
-
AI Security Governance & Control
A practical framework for governing AI systems, from building an AI inventory and classifying risk to control frameworks, architecture reviews, testing, and production monitoring.