Name the sponsor, program owner, and identity decision rights
Govern identity scope and ownership
Demo data. Any changes do not save and are reset on refresh.
Identity Access Modernization
- Organization
- Demo
- Unit
- Not attached
- Site
- Chicago
PERT
Critical pathComplete→Dependencies
Define the workforce, contractor, service, and privileged identity scope
Govern identity scope and ownership
On critical path
Identify authoritative identity sources and account owners
Govern identity scope and ownership
On critical path
Define joiner, mover, and leaver handling goals
Control identity lifecycle and operations
Establish a repeatable privileged-account inventory process
Protect authentication and privileged access
Separate daily-use and administrative identities
Protect authentication and privileged access
Set authentication requirements by access risk
Protect authentication and privileged access
On critical path
Establish phishing-resistant authentication for high-risk access
Protect authentication and privileged access
Define emergency-access accounts and recovery controls
Protect authentication and privileged access
Establish service-account ownership and credential lifecycle rules
Control identity lifecycle and operations
Establish third-party identity sponsorship and expiration rules
Control identity lifecycle and operations
Define a protected path for administrative access
Protect authentication and privileged access
On critical path
Establish privileged-secret rotation and revocation rules
Protect authentication and privileged access
On critical path
Establish periodic access and entitlement reviews
Control identity lifecycle and operations
Centralize important authentication and privilege event logs
Protect authentication and privileged access
Define identity incident triage, containment, and recovery
Protect authentication and privileged access
Pilot the controls with one bounded user or administrator group
Protect authentication and privileged access
On critical path
Define operating metrics, review cadence, and transition to routine operations
Control identity lifecycle and operations
On critical path
Critical path
7 remaining, Define the workforce, contractor, service, and privileged identity scope, Next, November 20, 2026
Dependencies
No handoffs need review
Next handoff
Define the workforce, contractor, service, and privileged identity scope, Identity lead, November 9, 2026
Recommendations
| Actions | ||||||
|---|---|---|---|---|---|---|
| Chicago | Identity Access ModernizationProgram | USD 95M | Close the 4.5 person-day shortfall: confirm capacity, reduce remaining scope, or agree a revised target.4.5 person-days short of the capacity needed by 2027-05-21. Forecast finish 2027-07-02 is 42 days after the target. | May 21, 2027 |
- Site
- Chicago
Identity Access ModernizationProgramUSD 95MRecommendation
Close the 4.5 person-day shortfall: confirm capacity, reduce remaining scope, or agree a revised target.4.5 person-days short of the capacity needed by 2027-05-21. Forecast finish 2027-07-02 is 42 days after the target.