This paper shows how CISOs can take a step back and return to first principles. Instead of adding more tools, leaders can rationalize identity programs by focusing on the three pillars that matter: ...