Quotable
97 lines from The Modern Identity Operating Model, each with the chapter that makes the full argument.
Use them in a slide, a post, or a hard conversation. Select any line to copy it, with attribution to Becky Sandberg, the book, and the chapter.
On identity
Identity is not a technology problem.
Introduction
Identity is rarely where anyone thinks to look.
Introduction
AI does not fix identity. AI exposes identity. If the structure is weak, AI reveals it faster.
Introduction
Identity begins with people.
Chapter 1
Identity answers who or what this is. Access answers what it is allowed to do.
Chapter 1
Identity does not usually break all at once.
Chapter 1
Identity becomes visible when no one can answer a simple question.
Chapter 1
Identity work is emotional work. It holds together systems that were never designed to align.
Chapter 1
Identity is not a project you complete.
Chapter 3
Identity work is people work.
Chapter 3
Identity fails at the system level, not just at the control level.
Chapter 3
AI did not build the crack in the foundation. It is the earthquake that finds it and leaves a one-star review.
Chapter 3
Architectures vary. Tools vary. The four jobs do not.
Chapter 3
Identity is a human discipline.
Chapter 5
Identity is emotional before it is operational.
Chapter 5
Identity is strategic because it governs how authority, trust, and action move through the organization.
Chapter 21
If the operating model is the product, then every artifact, platform, workflow, and review is part of building it.
Chapter 21
The future of identity will reward models that are structurally strong, not just technically current.
Chapter 22
On the model
The pillars are not separate disciplines that happen to touch. They are one system viewed from five angles.
Chapter 5
The operating model is the thing you are building. Everything else expresses it.
Chapter 5
On drift
Drift is the signal that the operating model has fallen out of alignment.
Introduction
Ownership that is assumed is not ownership. It is drift waiting to happen.
Chapter 2
Traditional IAM often asked people to be the operating model.
Chapter 2
Drift is predictability coming apart.
Chapter 4
Drift is not a failure of people. Drift is what happens when no one is responsible for guiding the work.
Chapter 4
Identity implementation does not begin with ambition. It begins with visibility.
Chapter 11
You cannot govern what you have not mapped. You cannot improve what you have only partially seen.
Chapter 11
Best practice is not always the first move. Sometimes the right first move is the one the organization can actually hold.
Chapter 11
Implement in waves. Define one, close it, then expand before taking on the next.
Chapter 11
On governance and ownership
A standard that no one knows about is not a standard.
Chapter 2
Ownership does not mean doing all the work. Ownership means being accountable for how the work is done.
Chapter 4
Governance is where identity becomes intentional.
Chapter 5
An owner who does not know they are the owner is not an owner.
Chapter 6
Accountable and responsible are not the same.
Chapter 6
Good enough is a real standard, not a failure of nerve.
Chapter 6
Name the layers and governance becomes usable. Blur them and it becomes noise.
Chapter 6
An exception with no expiration date is not an exception. It is a pet.
Chapter 6
Governance is not complete when it is published. Governance is complete when people can work from it.
Chapter 12
AI governance is not a new discipline floating above identity. It is identity governance under higher speed and greater consequence.
Chapter 12
An object without an owner is not neutral.
Chapter 24
On lifecycle
A lifecycle that adds without subtracting is not neutral.
Chapter 7
Lifecycle is where identity stops being theoretical and becomes operational.
Chapter 7
Lifecycle is only as strong as the truth that feeds it.
Chapter 7
Different identities. Same truth. Every identity needs a beginning, a middle, and an end.
Chapter 7
A disabled account is not a finished one.
Chapter 13
The system is not the problem. The lack of an operating model for non-employee identity is the problem.
Chapter 13
An employee’s last day starts an ending. A finished task starts nothing at all.
Chapter 13
On access
Access is the relationship between identity and capability, not a list of permissions.
Chapter 5
Access is where risk becomes visible.
Chapter 5
An access role is not access. A group is not access. A permission is not access.
Chapter 8
Access that sits unused is not convenience.
Chapter 8
Access is not theoretical.
Chapter 8
Authentication proves identity. Access defines capability. Authorization enforces it in the moment.
Chapter 8
People do not usually work around identity because they dislike control. They work around it because the intended path does not support reality.
Chapter 8
A toxic combination is never planned. It is just the access equivalent of a house guest who was only supposed to stay the weekend.
Chapter 8
It is administrative theater, and everyone in the room already knows their one line: approve, approve, approve.
Chapter 8
Access works when people can understand it, request it, review it, and trust it.
Chapter 14
Review depends on ownership. Ownership depends on design.
Chapter 14
A privilege chain that has not been mapped is still there. It is just invisible.
Chapter 24
On technology
Being tool-agnostic is not being tool-indifferent.
Chapter 4
The tool is not the product. The workflow is not the product. The operating model is the product.
Chapter 5
Technology can automate what exists. It cannot rescue what was never structurally defined.
Chapter 9
If drift cannot be seen, it cannot be managed. Technology turns drift into evidence.
Chapter 9
Identity is not a feature beside the work.
Chapter 16
Complexity is often just drift that acquired an implementation plan.
Chapter 16
You cannot hire your way out of this. You can only structure your way out.
Chapter 16
On AI and nonhuman identity
If an agent can act, someone must be able to answer why it exists, what it can do, and when it should stop.
Chapter 7
The most dangerous access model for AI is inherited ambiguity.
Chapter 15
For an agent, “who acted” is not enough. The model has to answer which instance, and why.
Chapter 15
An AI assistant driving a human’s own browser session is a shared account without a vault.
Chapter 15
Nobody hands an intern the authority to create new employees. Somewhere, an agent already has the equivalent, and no one remembers granting it.
Chapter 15
On measurement and predictability
You do not measure maturity by counting tools. You measure it by how little the organization is surprised.
Chapter 4
Predictability is the real measure of maturity because predictability is what people experience.
Chapter 4
Predictability is not rigidity.
Chapter 4
Principles turn identity from a collection of tasks into a discipline people can trust.
Chapter 4
What they don’t know yet is their own login.
Chapter 4
A dashboard that only turns red after the damage is done is not measurement.
Chapter 18
A wall of numbers no one acts on is not a measurement program.
Chapter 18
A healthy identity environment is not simply busy.
Chapter 18
Identity is not healthy because the workflow ran. Identity is healthier when the system behaves predictably under change.
Chapter 18
Predictability is not a soft measure. It is the visible expression of maturity.
Chapter 18
If telemetry cannot help you see drift forming, it is only noise.
Chapter 18
On the work and the people
You are not behind. You are starting where the work actually is.
Chapter 1
Identity fails when communication is weak, expectations are unclear, and people are asked to carry responsibilities they were never prepared to hold.
Chapter 10
An approval path is not governance if the approver cannot interpret the decision.
Chapter 10
Human-in-the-loop is not the same as human accountable. Both may be needed. Accountability is never optional.
Chapter 10
A sponsor who only receives status updates is not sponsoring.
Chapter 17
Identity change fails when people are expected to carry a new model they were never helped to understand.
Chapter 17
Identity leadership is not improvisation.
Chapter 19
Identity is not a side function.
Chapter 25
On leadership
Identity leadership is the discipline of creating clarity where the environment keeps producing ambiguity.
Chapter 19
Identity teams do not need to be large to be high-performing. They need responsibility clarity, trust, and a structure that matches the work.
Chapter 20
You can outsource activity. You cannot outsource accountability.
Chapter 20
Identity leadership begins the moment you stop asking how to hide the complexity and start asking how to structure it well enough to hold.
Chapter 25
From the case studies
The recovery path is a back door to every front door it resets.
Chapter 23
A shared account cannot be offboarded. You can rotate it. You cannot remove one person from it.
Chapter 23
Retirement by coincidence is not lifecycle. An estate the model cannot end is an estate the model does not govern.
Chapter 23
Want the full argument behind these lines? See the book, or get updates when new guides arrive.