EY treats IAM not just as a tech challenge, but as a holistic business capability. They use a five-phased approach to transform fragmented capabilities into cohesive systems using assessment, strategy, governance, implementation strategy and planning and operations. Building on its core audit and risk capabilities, EY rapidly expanded into digital identity, zero trust, managed cyber operations, and cyber strategy.

The acquisition of Dignari enhanced EY’s offerings further by combining federal mission expertise, specifically within the Department of Homeland Security, with global commercial innovation. Here, Alex Gurney highlighted EY’s work supporting a U.S. federal agency during a Zero Trust identity infrastructure modernisation, where the core challenge was balancing legacy technology upgrades and evolving security regulations with continuous, uninterrupted operational and mission continuity.