IGA: Internal Identities Are a Given, External Ones Are the Real Challenge – But True Security Requires Both

Klaus Tietze

Information Security Manager, ARCA-Consult

Detlef Sturm

Senior Business Consultant & Product Evangelist

In today’s digital landscape, managing who has access to what – and when – is vital to organizational security. While internal identity governance is often well established, external identities such as contractors, partners, and service providers can present hidden risks if not properly managed.

Find out more

This on-demand webinar explores how Identity Governance & Administration (IGA) can be extended to manage both internal and external identities with confidence and compliance.

What You'll Learn:

The Hidden Risks of External Identities: Why managing third-party identities is more complex – and more critical – than ever.
Regulatory Compliance & Audit Readiness: Understand how frameworks like NIS-2, DORA, and TISAX impact identity management requirements for external actors.
Best Practices in Authorization Design: Should external users inherit internal roles, or is a separate role model safer? We explore practical approaches.
Data Gaps & Documentation Challenges: How to maintain oversight when external identity data doesn’t live in your HR system.
Contractual Complexity: Addressing varied contract types (e.g., service, freelance, temporary) in a unified IGA model.

Why Watch This Recording?

Whether you’re in IT security, compliance, or identity governance, this session offers strategic insights and actionable takeaways that will help your organization strengthen its identity posture – beyond employees.

Don’t miss your chance to build a more secure and compliant IGA framework – on your own schedule.

Speakers

Klaus Tietze

Information Security Manager, ARCA-Consult

For over 20 years, Klaus Tietze has been deeply involved in the implementation of Information Security Management Systems (ISMS). His focus is on combining security requirements with efficient application, ensuring the "meaningful implementation" of regulatory and legal requirements for companies.

As a Managing Consultant, he possesses extensive knowledge and practical experience in specialized areas of rights management, including identity access, high-privileged access, and SIEM management. Klaus Tietze has significantly supported clients ranging from SMEs to large corporations in implementing BAIT, VAIT, and KAIT, as well as achieving TISAX® certification.

Detlef Sturm

Senior Business Consultant & Product Evangelist

Detlef Sturm, Senior Business Consultant and Product Evangelist at Beta Systems, has more than 20 years of experience in the field of Identity and Access Management (IAM). Among other things, he was responsible for the development of Access Intelligence solutions. His current focus is on access design, particularly in the areas of role mining and role engineering.

Further Resources

Webinar

Practical NIS-2 Requirements for Critical Infrastructure Operators in Public Services

The NIS-2 Directive significantly tightens cybersecurity requirements for operators of critical infrastructure and essential public services across the EU ‒ including energy, water supply, and municipal utilities. But what does this mean in practice for organizations affected today? This on-demand webinar shows you exactly how to interpret and implement NIS-2 requirements effectively.

Watch webinar

Webinar

Action Over Planning – IAM Project Management Tips and Insights (DE)

Identity and Access Management (IAM) isn’t just an IT initiative – it’s a strategic enabler of security, operational efficiency, and compliance in modern digital businesses. Yet too many IAM projects stall before they begin: over-planning, uncertain priorities, regulatory complexity, and limited resources can slow progress and undermine results.

Watch webinar

Whitepaper

Turning Obligation into Advantage: NIS-2 and the Strategic Value of Identity & Access Management

The NIS-2 Directive significantly raises the bar for cybersecurity across Europe, placing Identity & Access Management at the center of compliance and security efforts. This whitepaper explains why IAM under NIS-2 is not merely a regulatory obligation, but a strategic foundation for resilience, transparency, and control. Developed in collaboration with egerer Consulting, it brings together regulatory insight and strategic consulting expertise with practical guidance on implementing NIS-2 requirements using a modern IAM solution.

Download whitepaper