TL;DR: A tighter focus on identity lifecycle management, infrastructure simplification, and measured growth highlights how enterprise identity complexity is pushing companies toward comprehensive credential management, according to Axiad’s interview with new CFO Brian Szeto. The signal for practitioners is that identity programmes are being judged less by feature breadth and more by governance clarity, operational control, and the ability to reduce sprawl.
Editorial analysis by NHI Mgmt Group, based on content published by Axiad: “Q&A With Axiad’s New CFO: Brian Szeto”.
Key questions
Q: How should security teams evaluate identity lifecycle platforms for mixed estates?
A: Security teams should judge lifecycle platforms by whether they can govern the oldest, most regulated systems as well as modern SaaS.
Q: Why does custom identity governance break down as identity sprawl grows?
A: Custom IGA breaks down because every new application, entitlement pattern, and identity type adds more schema, policy, and integration work.
Q: When should organisations simplify identity tooling rather than add another control layer?
A: When the real problem is fragmented ownership or duplicated workflow, another control layer usually adds more handoffs instead of reducing risk.
Practitioner guidance
- Map identity lifecycle ownership Document who owns issuance, change, review, and retirement for every identity class across users, workloads, and service accounts.
- Rationalise identity infrastructure Identify duplicated IAM, NHI, and credential workflows that create conflicting sources of truth or overlapping approval paths.
- Define a single credential estate view Track where credentials live, who can create them, who can revoke them, and which systems depend on them.
Bottom line: The interview points to a market shift where identity lifecycle discipline is being treated as a core governance capability, not a peripheral administration task.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
Identity lifecycle is no longer a support function, it is the operating model for credential governance. The interview reinforces a market reality we see repeatedly: identity programmes fail when lifecycle ownership is fragmented across teams and systems. When identities span users, machines, assets, and interactions, lifecycle discipline becomes the only reliable way to keep state, access, and accountability aligned. Practitioners should treat lifecycle management as the primary governance layer, not as an implementation detail.
A question worth separating out:
Q: What should an IAM programme prove to justify investment in lifecycle governance?
A: It should show that lifecycle controls reduce unresolved identities, shorten revocation paths, and improve auditability across the full credential estate. The strongest case is not feature count, but whether the programme can keep identity state current enough to support safe access decisions.
👉 Read our full editorial: Axiad’s CFO interview points to identity lifecycle and risk focus