Identity & Access Management (IAM) Expert – Governance, Access Control and Implementation
In this 5-day training, you will learn how to gain control over digital identities, authorisations, and access risks. Discover how to successfully implement, govern and future-proof IAM within your organisation, while gaining insight into current developments such as Zero Trust, cloud, non-human identities, AI agents and IGA.
IMF Academy is a leading training provider in the field of Identity Management & Access Control (IAM)!
Identity & Access Management (IAM) Expert – training options
Option 1: 5-day training (in-class and live online)
Option 2: In-company training (in-class and live online)
Control over digital identities, access rights and risks with IAM
Identity & Access Management (IAM) is the collective term for the processes, policies, architecture and technologies that organisations use to manage identities and authorisations. IAM has become a critical foundation for information security, risk management, privacy, compliance and digital operations. Today, organisations need to maintain control not only over their own employees and their authoristions, but also over customers, suppliers, partners and digital identities such as cloud applications, service accounts, APIs, machines, robots, and AI agents.
In this practical 5-day IAM Expert training, you will gain insight into the strategic, organisational and technical aspects of IAM. You will learn how to manage identities and access rights effectively, reduce risks, and better prepare, steer, assess and improve IAM initiatives within your organisation.
Do you want verifiable control over who - human or machine - has access to which systems, data and processes? This 5-day IAM Expert training provides you with the knowledge and practical tools to achieve this.
Why IAM projects succeed - or fail
The number of digital identities and access rights is growing rapidly. Cloud applications, hybrid working, supply-chain collaboration, SaaS solutions, API integrations and AI applications make organisations more flexible, but also increase the risks associated with access, misuse and insufficient control.
At the same time, requirements relating to information security, privacy, audit, legislation, regulation and internal control are becoming more stringent, such as the GDPR, ISO 2700x, NIS2, NIST and sector-specific regulations.
However, many IAM initiatives do not deliver the desired outcome. Projects can stall/fail due to unclear ownership, inadequate processes, an excessive focus on tools, insufficient business involvement, complex legacy environments, or too little attention to governance and implementation.
During this training, you will learn how to avoid these pitfalls. You will gain insight into the decisions required for a successful IAM approach and learn how to critically steer governance, processes, architecture, suppliers and outcomes.
What will you learn in this IAM training?
Over 5 intensive training days, you will gain an integrated and practical understanding of Identity & Access Management (IAM). You will not only learn the foundations of identity management, authorisation management and access governance, but will also explore current topics such as Zero Trust, PAM, CIAM, non-human identities, AI agents, IGA, privacy and NIS2. The knowledge and practical tools gained during this training will better prepare you to successfully initiate, guide, assess and improve IAM initiatives within your organisation.
You will a.o. learn:
- How to manage digital identities throughout their entire lifecycle
- The role of IAM in modern, hybrid and cloud-driven organisations
- How to structure, manage and review authorisations logically, while preventing excessive access rights
- How to apply Role Based, Attribute Based and Policy Based Access Control (RBAC, ABAC and PBAC), Access Governance and Zero Trust within your IAM approach
- How to manage privileged accounts and customer identities using Privileged Access Management (PAM) and Consumer Identity & Access Management (CIAM)
- How cloud environments, containerisation, federated identities and modern protocols affect identity and access management
- How to gain control over non-human identities, such as service accounts, APIs, robots and AI agents
- How to successfully establish an IAM or IGA initiative, determine its scope, create stakeholder support, and assess suppliers or solutions
- Which common pitfalls can delay or undermine IAM projects, and how to avoid them
- How to link IAM to privacy, information security, risk management, compliance and relevant legislation, regulations and standards, such as ISO 2700x, NIS2 and NIST
- How to translate IAM controls into concrete risks, control measures and measurable outcomes
- How to communicate effectively about IAM with management, auditors, and security, risk, compliance, HR and IT professionals.
IAM training - format and results
This IAM training is practical, interactive and strategic in nature. Throughout the programme, you will work with real-life IAM challenges, examples and practical tools that you can apply directly within your own organisation.
After completing the training, you will be better equipped to identify, analyse and prioritise IAM-related challenges and risks, including those related to identities, authorisations, privileged access, non-human identities and AI agents. You will be able to assess IAM processes, roles and responsibilities, contribute to the development of an IAM roadmap or improvement programme, and better prepare and steer IAM projects and implementations.
The training will also help you to critically assess IAM solutions, proposals and suppliers, and to translate IAM objectives into effective compliance, risk control and measurable outcomes. In addition, you will be better able to connect the perspectives of business, IT, security, privacy, risk and audit, contributing to a successful, controlled and verifiable IAM implementation.
Who should attend this IAM training?
Identity & Access Management (IAM) is explicitly not solely an IT issue. A successful IAM approach requires close collaboration between business, IT, security, HR, risk, compliance, privacy, and audit. Whether you are responsible for processes and ownership from a business perspective, the technical design or implementation from an IT perspective, or assessment and control from a security, audit, risk or compliance perspective, this training provides you with a shared framework and practical tools to steer a successful IAM approach.
Relevant roles include, among others: Identity & Access Management (IAM) managers and specialists, process managers, IT managers, information managers, heads of information security, Chief Information Security Officers (CISOs), security officers, IT auditors and internal auditors, network managers and administrators, security and information architects, risk managers, compliance managers, privacy officers, HR managers, controllers, project and programme managers, and all professionals responsible for IAM projects, governance or supplier selection.
IAM is no longer solely a technical topic. It is a business-critical challenge at the intersection of business, IT, security, risk, compliance and HR.
Prerequisites and educational level of the training
The trainer assumes that you have several years of professional experience and understand how organisations, processes and responsibilities function in practice. In-depth technical knowledge is not required. However, an affinity with information management, information security, business processes, governance, audit or risk management is desirable. Your own practical experience is highly valuable: you will not only learn from your trainers, but also from the challenges, perspectives and insights shared by your fellow participants.
This 5-day IAM Expert training is held on a bachelor level.
Continuing Professional Education (CPE) credits
You will receive a personal certificate of participation, which you may submit when applying for CPE credits from professional associations.
Also of interest!
All our courses are delivered in-class or live online, unless otherwise stated. Below you will find a selection of courses that may also be of interest to you:
- Certified Cloud Security Professional - CCSP (ISC2)
- Certified Chief Information Security Officer - C/CISO (EC-Council)
- Certified Information Systems Security Professional - CISSP (ISC2)
- ISO 31000 Risk Management
- Cybersecurity Fundamentals (ISACA)
- Certified Information Security Manager - CISM (ISACA)
- Cybersecurity for Industrial Automation and OT
- Certified Data Management Professional - CDMP (DAMA)
Partners

Reviews
The Identity Management & Access Control training is assessed by participants with a 9 (on a scale from 1 to 10):
"Great training. The training gave a good insight of what IAM is about. I could relate it to our current status quo and identify a course of action for further analysis."
"The training was perfect, complete and customised."
Thierry De Brabandere | IT Security Associate Director | Coca Cola European Partners
"Good trainers, very patient, explains a lot. Very good."
"The trainers are very knowledgeable & professional."
"Good overview of the IAM domain."
IAM Manager
"Very good and practical"
Engineer
"Both the training and trainers were very good"
System analyst
"Good source of knowledge and exchange of experience platform."
"High quality, great interaction."
"Good introduction to the IAM landscape, principles, best practices and technical overview."
IAM Manager
In-company
IAM Expert training – in-company
With at least 6 participants an in-house IAM training is often more cost-effective and could be your best option. An in-company training, customised to the needs of your organisation, has many advantages and:
- saves you and your colleagues time
- enables you to train in the comfort of your own working environment
- saves travel and accommodation expenses
- can be arranged at a time and place convenient for you
- sensitive issues can be discussed openly since no outsiders are present
Do you prefer an in-company training? Please contact us. We are more than happy to discuss the various possibilities with you.
We have organized in-company trainings all around the globe, among others in the following countries: Aruba, Azerbaijan, Curaçao, Denmark, Finland, Germany, Great Britain, Greece, Luxembourg, Nigeria, Oman, Pakistan, Saudi Arabia, Suriname, Switzerland, Türkiye, Uganda.
Content
Identity & Access Management (IAM) Expert - Programme
In 5 intensive training days, you will gain an integrated, practical understanding of Identity & Access Management (IAM). You will not only explore the fundamentals of Identity Management, authorisation management and access governance, but also delve into current topics such as Zero Trust, PAM, CIAM, non-human identities, AI agents, IGA, privacy, and NIS2. This will better prepare you to successfully initiate, guide and evaluate IAM initiatives within your organisation.
DAY 1
Identity Management & Access Control (IAM)
On the first day, you will lay the foundations for a successful IAM approach. You will gain insight into the role of identity in modern organisations and the lifecycle processes required to manage identities in a controlled and effective manner. You will learn, among other things, how digital identities are created, changed and removed, and which processes are needed to manage these activities effectively.
- The access challenge: why access management is complex
- The key drivers for Identity & Access Management (IAM)
- Identity philosophy: what do we mean by a digital identity?
- Identity Management lifecycle processes
- Basic IAM architecture and IAM solutions
- Federated identities
- Authentication concepts
DAY 2
Authorisation management
How do you determine which access rights an individual requires? How can you prevent excessive access rights? How do you retain control of access when roles, job functions, processes and applications are constantly changing? You will learn how to structure, manage and assess authorisations in a logical and effective way.
- Authorisations and authorisation management
- Role Based Access Control (RBAC)
- Access governance model
- Dynamic access control: Attribute Based Access Control (ABAC) and Policy Based Access Control (PBAC)
- Zero Trust and IAM
DAY 3
PAM, CIAM and containerisation
Not every identity has the same risk profile. Privileged accounts and customer identities require a targeted approach, clear processes and appropriate control measures. You will learn when, why and how CIAM and PAM are needed, how to control accounts with elevated privileges, and how modern cloud and containerised environments affect identity and access management.
- Consumer Identity & Access Management (CIAM)
- Privileged Access Management (PAM)
- Containerisation
DAY 4
New developments and the implementation of Identity Governance & Administration (IGA)
New technologies are changing the way organisations need to identify, manage, and protect identities. This is particularly relevant for non-human identities, robots and AI agents. You will gain insight into the implications of AI, machine identities and modern cloud architectures for IAM governance. In addition, you will receive practical guidance for initiating and delivering an IAM or IGA programme. You will learn how to define the scope, create business support, assess suppliers and prevent an IAM project from becoming overly complex, delayed or unable to deliver the intended results.
- Identity 2.0 and Identity 3.0
- Non-human identities
- Robots and AI Agents
- Modern protocols
- Implementation of Identity Governance & Administation (IGA)
- IAM projects: approach and success factors
- Procurement and selection of IAM solutions and suppliers
- Do's and don'ts of IAM implementations
DAY 5
Governance, Risk and Compliance (GRC)
On the final day, you will connect IAM with privacy, information security, compliance and risk management. You will learn how to translate IAM controls into concrete risks, control measures and measurable outcomes. You will also gain insight into the role of monitoring, detection and response in relation to unusual authentication behaviour, high-risk changes to privileged access, and inappropriate use of identities. You will learn how IAM contributes to verifiable control and how to communicate effectively about IAM with management, auditors, security, risk and compliance professionals.
- Privacy and IAM
- information security and IAM
- IAM in relation to legislation, regulations and standards, including ISO/IEC 2700x, NIS2 and NIST
- Risk analysis - practical application
- Miscellaneous topics and practical case studies
- Q&A
Certificate
After the 5-day training Identity & Access Management (IAM) Expert: Governance, Access Control and Implementation, you will receive a Personal Certificate.
This certificate confirms that you not only possess the relevant knowledge, skills and/or competencies in the field, but are also able to apply this expertise successfully in practice.
Trainer(s)
Identity Management & Access Control trainers
André Koot MBA CISA CISM
André Koot is Security and IAM Lead Consultant at Sonic Bee. André is also a member of the BoK Committee of IDPro, the professional organization for IAM experts, as well as a member of the advisory board of Identity next and a board member of the Cloud Security Alliance (Netherlands Chapter).
Eng. Bert de Vries MBA MBI
Bert de Vries is Senior IAM Business Consultant and trainer at SonicBee. Bert has many years of experience as a trainer within this field of interest. He is mainly focused on the business-side of IAM: the governance, architecture and processes. He conducts strategic analyses and ensures projects are completed successfully. Bert is a member of IDPro.
Start date(s)
The Identity & Access Management (IAM) Expert training consists of 5 training days from 09.30 hrs in the morning until 17.00 hrs in the afternoon. The training will be held in Amsterdam (or surroundings) on the following dates:
- 8 + 9 + 15 + 16 + 22 March 2027
- 10 + 11 + 17 + 18 + 24 November 2027
Fee / Registration
The fee for the Identity & Access Management (IAM) Expert training is € 5,480 (VAT excl.). The fee includes all lunches, coffee, tea and course materials.