Toolkit
The toolkit
Everything in this book is meant to be used, not only understood. This is the free toolkit: the browser tools, the full system catalog, and the templates, ready to download and adapt. No sign-up, no cost.
Came here from the book? The full-color figures and the fillable templates from Appendix B, the Artifact Pack, are here.
Small company, and identity is one of several things you own? Start with the small company page instead of the full template set.
Where to begin
Three steps, about twenty-five minutes
If you do nothing else here, do these in order. They run entirely in your browser, collect nothing, and by the end you will have one named move rather than a list of everything that is wrong.
See where you stand · about 5 minutes
Predictability Assessment
A five-minute, honest self-check across the five pillars. A mirror, not an audit.
Pick one first move · about 10 minutes
Check it against your obligations · about 10 minutes
Maturity and Compliance Gap Map
Turn your gaps into a sequenced register, mapped to the frameworks you answer to and ready to hand to a sponsor.
The rest of the toolkit
Go deeper when the work calls for it
The book’s templates
The fillable artifacts from Appendix B and the chapters, grouped by pillar, each with field definitions and a worked example.
Reference
The full-color figures, the Identity System Catalog, the glossary, the frameworks map, quotable lines, and reporting dashboards.
Reading the book? Everything it points you to
When the book says something is at modernidentityoperatingmodel.com, this is where it lives.
- What identity is, and why it deserves the seat: the case in five minutes.
- The predictability assessment (Chapter 4): a quick, honest read of where you stand.
- Every figure, full size and in full color.
- The fillable artifact pack (Appendix B and Chapter 24), plus the additional templates the chapters introduce.
- The full Identity System Catalog (Chapter 11).
- The ownership-model reference.
- Delivery discipline, the fuller treatment promised in Chapter 12.
- The metric library and threshold guidance (Chapter 18), with the per-level dashboards.
- Each pillar’s business case, by audience (Chapter 21).
- The framework-by-framework walkthrough (Appendix C), with the framework-by-pillar coverage table and every source (Appendices D and E).
Progress over perfection
You are closer than the audit made you feel.
Identity does not get fixed in one heroic project. It gets better in small, real steps, and every one of them counts. Any one of these is a win worth taking.
Name one owner
Pick a single system and write down who actually owns access to it. That name is where governance starts.
One system, now owned.Ask who decides
Take one access decision and find out who is authorized to approve it. If nobody can answer, that is the finding.
One decision with a name on it.Set one expiry
Give one piece of standing access an end date. Access that expires on its own is access you never have to chase.
One thing that cleans up after itself.Review one entitlement
Take a single entitlement and ask what it actually grants. Most audit surprises start as a name nobody questioned.
One permission you can explain.Retire a stale account
Find one account nobody has signed into in ninety days and confirm whether it still needs to exist. Usually it does not.
One fewer door left open.Catalog one system
Walk one system through the catalog with its owner. One honest row beats a blank inventory every time.
One row you can defend.Start with the free toolkit.
One or two people covering security at a small company, and identity is one of several things you own? This page is written for exactly that.
Updates
New templates and guides, when they are ready
A short email when something new is published, a template is updated, or the book is out. No more than once a month.
Kit, the email service I use, stores only your email address. You will get one email to confirm, and every email has an unsubscribe link.