They are really trying to codify IAM skills and knowledge, taking critical know-how out of the tribe and putting it down for others to learn.
They also are building out a certification. I took the CIDPRO exam and it really made me sweat. Like any certification, the value is in the studying you have to do and the awareness of concepts and practices rather than in holding the cert.
This was not what I expected when I started reading, but an interesting article nonetheless!
My first reaction is that the article is focusing on a rather specific (while generic) way of conceptualizing knowledge and skills, which are at best fuzzy attributes to start with. However, I don't feel that the specific framework and examples (including IAM roles) can be adopted well as-is; there's a lot of assumptions to the team and org structure surrounding this, along with processes leading up to defining the roles, which I fear can easily lead to cargo-culting.
My takeaway from the article is that it could act as input for teams to better understand their needs and roles, but to not act as a direct blueprint to be implemented :)
“The survey noted a Dunning Kruger effect to describe why someone proficient in a particular vendor product could create a belief that they are experts in IAM overall.”
They are really trying to codify IAM skills and knowledge, taking critical know-how out of the tribe and putting it down for others to learn.
They also are building out a certification. I took the CIDPRO exam and it really made me sweat. Like any certification, the value is in the studying you have to do and the awareness of concepts and practices rather than in holding the cert.