The Identity Blueprint Tue, 23 Jun 2026 05:00:05 -0400 https://theidentityblueprint.buzzsprout.com en-us © 2026 The Identity Blueprint yes 5af02e44-3b95-582a-8d1d-38c8806ef633 prescott.ernie@outlook.com Ernie Prescott episodic false Enterprise identity and access management isn't a product you buy — it's a program you build. The Identity Blueprint covers the full spectrum: seven-phase IAM frameworks, zero trust architecture, JIT access, FIDO2 passkeys, identity governance, and the operational models that hold up at enterprise scale. Built for practitioners who are past the basics. Hosted by Ernie and Josée.

]]> Buzzsprout (https://www.buzzsprout.com) Ernie Prescott prescott.ernie@outlook.com https://storage.buzzsprout.com/66dng4m47p7xt59j74bx5d78ypg9?.jpg The Identity Blueprint https://theidentityblueprint.buzzsprout.com Planning Successful Identity Management Rollouts Planning Successful Identity Management Rollouts The most dangerous assumption in any identity rollout is that the hard part is technical. It isn't. The hard part is the manager who needs access right now and doesn't care how it gets done. The administrator who knows the bypass is wrong but creates it anyway. And the organization that spent millions on the architecture and nothing on planning for either of them.

In this episode, Ernie and Josée tear apart Phase 6 of the IAM engagement blueprint: implementation planning. From translating a three-year strategic vision into granular executable projects, to mapping the dependencies that silently kill timelines, to the brutal honest assessment of whether your current team is actually equipped to build what the architecture demands.

You'll leave knowing why IAM programs almost never fail because the code is broken — and exactly what to do about the three things that actually bring them down.

If you've ever watched a multi-million dollar rollout collapse on launch day — this episode explains why, and how to make sure it never happens again.

Connect with Ernie Prescott on LinkedIn at linkedin.com/in/ernieprescott

]]> The most dangerous assumption in any identity rollout is that the hard part is technical. It isn't. The hard part is the manager who needs access right now and doesn't care how it gets done. The administrator who knows the bypass is wrong but creates it anyway. And the organization that spent millions on the architecture and nothing on planning for either of them.

In this episode, Ernie and Josée tear apart Phase 6 of the IAM engagement blueprint: implementation planning. From translating a three-year strategic vision into granular executable projects, to mapping the dependencies that silently kill timelines, to the brutal honest assessment of whether your current team is actually equipped to build what the architecture demands.

You'll leave knowing why IAM programs almost never fail because the code is broken — and exactly what to do about the three things that actually bring them down.

If you've ever watched a multi-million dollar rollout collapse on launch day — this episode explains why, and how to make sure it never happens again.

Connect with Ernie Prescott on LinkedIn at linkedin.com/in/ernieprescott

]]> Ernie Prescott Buzzsprout-19337263 Tue, 23 Jun 2026 05:00:00 -0400 3214 implementation planning, IAM rollout, change management, dependency mapping, privileged access management, PAM, MFA adoption, access reviews, organizational readiness, resource model, identity governance, zero trust, SailPoint 1 7 full false The Nine Layers of Identity Architecture The Nine Layers of Identity Architecture Most organizations buy identity technology one piece at a time. A directory here. An MFA solution there. A PAM tool when the auditors ask for it. The result is nine disconnected layers that were never designed to work together — and an architecture that fails the moment it's tested.

In this episode, Ernie and Josée decode Phase 5 of the IAM engagement blueprint: the technology architecture and three-year roadmap. Nine distinct functional layers — from the foundational directory and identity provider, through IGA and PAM, to non-human identity governance, ITDR, CIEM, and ZTNA — mapped, sequenced, and engineered to work as a single coherent system.

You'll leave knowing exactly how to structure a realistic deployment across three horizons, why skipping steps is fatal, and what separates organizations that simply buy software from those that actually engineer a security program.

If you're an architect or IT leader responsible for making all of this work together — this is the episode that hands you the architecture.

Connect with Ernie Prescott on LinkedIn at linkedin.com/in/ernieprescott

]]> Most organizations buy identity technology one piece at a time. A directory here. An MFA solution there. A PAM tool when the auditors ask for it. The result is nine disconnected layers that were never designed to work together — and an architecture that fails the moment it's tested.

In this episode, Ernie and Josée decode Phase 5 of the IAM engagement blueprint: the technology architecture and three-year roadmap. Nine distinct functional layers — from the foundational directory and identity provider, through IGA and PAM, to non-human identity governance, ITDR, CIEM, and ZTNA — mapped, sequenced, and engineered to work as a single coherent system.

You'll leave knowing exactly how to structure a realistic deployment across three horizons, why skipping steps is fatal, and what separates organizations that simply buy software from those that actually engineer a security program.

If you're an architect or IT leader responsible for making all of this work together — this is the episode that hands you the architecture.

Connect with Ernie Prescott on LinkedIn at linkedin.com/in/ernieprescott

]]> Ernie Prescott Buzzsprout-19335638 Tue, 16 Jun 2026 05:00:00 -0400 2864 identity architecture, IAM, directory services, identity provider, IGA, PAM, non-human identity, ITDR, CIEM, ZTNA, zero trust, identity governance, privileged access management, AI agents, cybersecurity 1 6 full false Securing Identities from Hire to Fire Securing Identities from Hire to Fire Your employee submitted their resignation on Friday. By Monday morning their access was still fully active. Every system. Every application. Every privilege they ever accumulated.

In this episode, Ernie and Josée go deep on Phase 4 of the IAM engagement blueprint: process and lifecycle design. The joiner, the mover, the leaver — every transition point in the human identity lifecycle where access gets granted, recalculated, and revoked. From birthright provisioning on day one, to separation of duties enforcement when someone changes roles, to the instant revocation mechanisms that close the latency window the moment someone walks out the door.

You'll leave knowing exactly how a minor paperwork delay in HR becomes a fired employee with full access to your financial systems on a Friday night — and how to engineer that window permanently shut.

If identity lifecycle is your responsibility — or it should be and nobody has claimed it yet — this episode is not optional.

Connect with Ernie Prescott on LinkedIn at linkedin.com/in/ernieprescott

]]> Your employee submitted their resignation on Friday. By Monday morning their access was still fully active. Every system. Every application. Every privilege they ever accumulated.

In this episode, Ernie and Josée go deep on Phase 4 of the IAM engagement blueprint: process and lifecycle design. The joiner, the mover, the leaver — every transition point in the human identity lifecycle where access gets granted, recalculated, and revoked. From birthright provisioning on day one, to separation of duties enforcement when someone changes roles, to the instant revocation mechanisms that close the latency window the moment someone walks out the door.

You'll leave knowing exactly how a minor paperwork delay in HR becomes a fired employee with full access to your financial systems on a Friday night — and how to engineer that window permanently shut.

If identity lifecycle is your responsibility — or it should be and nobody has claimed it yet — this episode is not optional.

Connect with Ernie Prescott on LinkedIn at linkedin.com/in/ernieprescott

]]> Ernie Prescott Buzzsprout-19318878 Tue, 09 Jun 2026 06:00:00 -0400 3055 identity lifecycle, joiner mover leaver, JML, provisioning, deprovisioning, access revocation, birthright access, separation of duties, zero standing privilege, PAM, non-human identity, continuous access evaluation, latency window, identity governance 1 5 full false Why Identity Governance Must Lead Technology Why Identity Governance Must Lead Technology Season 1, Episode 4: You automated your practices. You accelerated your procedures. Yet you're still failing your audits. Your platform isn't fixing your identity problem — it's accelerating it. And right now, you're operating blindly when you should be seeing everything.

In this episode, Ernie and Josée break down Phase 3 of the IAM engagement blueprint: the policy and governance framework. Drawing from the Identity Management Institute, Microsoft Entra, SailPoint, Ping Identity, Okta, and CISA — this is the episode that establishes why governance isn't a phase you revisit after deployment. It's the conductor. Everything else is the orchestra.

If you're a CISO, a VP, or an architect responsible for an identity program and the technology is already live — this episode is not optional.

Connect with Ernie Prescott on LinkedIn at linkedin.com/in/ernieprescott

]]> Season 1, Episode 4: You automated your practices. You accelerated your procedures. Yet you're still failing your audits. Your platform isn't fixing your identity problem — it's accelerating it. And right now, you're operating blindly when you should be seeing everything.

In this episode, Ernie and Josée break down Phase 3 of the IAM engagement blueprint: the policy and governance framework. Drawing from the Identity Management Institute, Microsoft Entra, SailPoint, Ping Identity, Okta, and CISA — this is the episode that establishes why governance isn't a phase you revisit after deployment. It's the conductor. Everything else is the orchestra.

If you're a CISO, a VP, or an architect responsible for an identity program and the technology is already live — this episode is not optional.

Connect with Ernie Prescott on LinkedIn at linkedin.com/in/ernieprescott

]]> Ernie Prescott Buzzsprout-19287075 Thu, 04 Jun 2026 05:00:00 -0400 2913 IAM, identity and access management, identity governance, governance framework, IGA, PAM, privileged access management, provisioning, access certification, access review, identity lifecycle, least privilege, policy design, SailPoint, Microsoft Entra, CISA 1 4 full false Identity Strategy and Target State Design Identity Strategy and Target State Design Season 1, Episode 3:  Identity isn't a technology problem. It's a strategy problem. And until your executive team agrees on where you're going, every platform you buy and every policy you write is just expensive guesswork.

In this episode, Ernie and Josée map out Phase 2 of the IAM engagement blueprint: Identity Strategy and Target State Design. From building an executive vision that gets the CFO to write the check, to designing a target state capability map that governs employees, contractors, and autonomous AI agents — this is the episode that turns discovery into direction.

You'll leave knowing how to design a zero-trust architecture that actually gets funded, and why skipping the decision gate guarantees failure regardless of the technology you choose.

If you're an architect ready to stop fighting fires and start building something that lasts — this is your blueprint.

Connect with Ernie Prescott on LinkedIn at linkedin.com/in/ernieprescott

]]> Season 1, Episode 3:  Identity isn't a technology problem. It's a strategy problem. And until your executive team agrees on where you're going, every platform you buy and every policy you write is just expensive guesswork.

In this episode, Ernie and Josée map out Phase 2 of the IAM engagement blueprint: Identity Strategy and Target State Design. From building an executive vision that gets the CFO to write the check, to designing a target state capability map that governs employees, contractors, and autonomous AI agents — this is the episode that turns discovery into direction.

You'll leave knowing how to design a zero-trust architecture that actually gets funded, and why skipping the decision gate guarantees failure regardless of the technology you choose.

If you're an architect ready to stop fighting fires and start building something that lasts — this is your blueprint.

Connect with Ernie Prescott on LinkedIn at linkedin.com/in/ernieprescott

]]> Ernie Prescott Buzzsprout-19264519 Sat, 30 May 2026 10:00:00 -0400 2780 IAM, identity and access management, zero trust, enterprise security, identity governance, cybersecurity, identity strategy, target state design, zero trust architecture, capability mapping, joiner mover leaver, Microsoft Entra, SailPoint, NIST 1 3 full false Executing a Ruthless Identity Security Autopsy Executing a Ruthless Identity Security Autopsy Season 1, Episode 2: You can spend millions securing the front door. Vault-grade authentication. Biometric access controls. Armed monitoring around the clock. And an attacker will walk right past all of it — through the forgotten maintenance tunnel you didn't know existed. In this episode, Ernie and Josée execute Phase 1 of the IAM engagement blueprint: the identity security autopsy. A keystroke-level discovery process that surfaces every ghost account, shadow identity, and orphaned credential hiding in your environment before you build a single thing on top of them.

Connect with Ernie Prescott on LinkedIn at linkedin.com/in/ernieprescott

]]> Season 1, Episode 2: You can spend millions securing the front door. Vault-grade authentication. Biometric access controls. Armed monitoring around the clock. And an attacker will walk right past all of it — through the forgotten maintenance tunnel you didn't know existed. In this episode, Ernie and Josée execute Phase 1 of the IAM engagement blueprint: the identity security autopsy. A keystroke-level discovery process that surfaces every ghost account, shadow identity, and orphaned credential hiding in your environment before you build a single thing on top of them.

Connect with Ernie Prescott on LinkedIn at linkedin.com/in/ernieprescott

]]> Ernie Prescott Buzzsprout-19234213 Mon, 25 May 2026 09:00:00 -0400 3178 IAM, identity and access management, zero trust, enterprise security, identity governance, cybersecurity, IAM architecture 1 2 full false The Seven Phase Identity Security Blueprint The Seven Phase Identity Security Blueprint Season 1, Episode 1: One forgotten password. One orphaned VPN account with no MFA. That's all it took to shut down half the fuel supply of the United States East Coast. In this episode, Ernie and Josée unpack the seven-phase IAM Program Engagement Blueprint — the complete, sequenced framework for taking an enterprise from identity chaos to a governed, mathematically verifiable security program. From executive scoping to continuous operations, this is the architecture that separates organizations that get identity right from those that make headlines.

Connect with Ernie Prescott on LinkedIn at linkedin.com/in/ernieprescott

]]> Season 1, Episode 1: One forgotten password. One orphaned VPN account with no MFA. That's all it took to shut down half the fuel supply of the United States East Coast. In this episode, Ernie and Josée unpack the seven-phase IAM Program Engagement Blueprint — the complete, sequenced framework for taking an enterprise from identity chaos to a governed, mathematically verifiable security program. From executive scoping to continuous operations, this is the architecture that separates organizations that get identity right from those that make headlines.

Connect with Ernie Prescott on LinkedIn at linkedin.com/in/ernieprescott

]]> Ernie Prescott Buzzsprout-19215631 Thu, 21 May 2026 07:00:00 -0400 3167 IAM, identity and access management, zero trust, enterprise security, identity governance, cybersecurity, IAM architecture 1 1 full false