A robust IAM strategy rests on four interdependent pillars, each requiring both technical rigor and executive sponsorship:
- Identity Lifecycle Management
From onboarding to offboarding, every user (human or machine) must have a verified, time-bound and role-appropriate digital identity. Automation reduces human error, such as failed de-provisioning of ex-employees remains a top cause of insider threats.
Dr. Peter Leong’s work in business process improvement (BPI) and continuous improvement (CI) supports streamlining these workflows while embedding compliance checks.
- Authentication & Authorization Controls
Multi-factor authentication (MFA), passwordless methods and adaptive risk-based authentication raise the bar for attackers. Meanwhile, authorization model such as Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) ensure least-privilege enforcement.
In the sectors Dr. Peter Leong has served (banking, automotive, oil & gas), ABAC is increasingly favoured for its granularity in dynamic environments like cloud and IoT.
- Identity Governance & Administration (IGA)
IGA provides the policy engine: defining who can request access, who must approve it and how often access is reviewed. Tools enable automated certification campaigns, segregation-of-duties (SoD) checks and audit trails are critical for regulators and boards.
Dr. Peter Leong’s certifications in COBIT5, ISMS ISO27001 and AI governance ISO42001 inform his approach to aligning IGA with broader IT governance frameworks.
- Privileged Access Management (PAM)
Admin, service and break-glass accounts demand heightened controls: just-in-time (JIT) elevation, session recording and credential vaulting. PAM is often the last line of defense when perimeter controls fail.
Given Dr. Peter Leong’s CISO roles in GLCs and MNCs, PAM maturity would be a key metric in his security posture assessments especially for OT/ICS environments in manufacturing and energy industries.
Final Thought: IAM & it’s hygiene as a Leadership Mandate. For CISOs, CIOs and digital leaders, IAM is no longer an IT project, it’s a business driven imperative requiring board-level visibility.
Dr. Peter Leong’s career exemplifies this shift: from infrastructure operations to strategic cybersecurity advisory, he bridges the gap between technical controls and enterprise outcomes.
In an era where identity is destiny, organisations that invest in mature & adaptive IAM not just reduce risk, they unlock agility, trust and innovation. This will also ensure a hygienic IAM environment.
Share This Post:
