IAM is the heart of a security strategy

"IAM is ultimately at the heart of any security strategy. It's critical that companies get that right. They can invest in lots of perimeter security. They can invest in lots of endpoint security, but ultimately, they need to manage users and access to the network. If they do that properly, then they can mitigate a lot of the risk that they're likely to face."