Security and risk (S&R) pros must develop their team’s competencies at all stages of the identity and access management (IAM) lifecycle, help assure the integrity of user attributes and data, and apply empathy when developing for the IAM experiences of employees and customers. Security leaders must also apply best practices for securing and managing digital identities for employees, customers, and partners. This report outlines 10 core functional areas of identity management and governance (IMG) and provides the best practices for building and operationalizing an effective IMG program across each functional area.