Identity Management is part of Security, but there are also important distinctions. In particular, we need to see Identity and Access Management (I&AM) as based and focused on data management, applying concepts of data quality, availability and usability to achieve organisational excellence. In that sense, while having a significant content for Information Security, I&AM reaches into every aspect the organisation, its people and its processes.

Carlos Trigoso (BBC) discusses the BBC's Identity Classification, which supports Multi-factor and Risk-based authentication.