Claire McKenna
Director of Corporate Marketing, C1.ai
Claire McKenna is Director of Corporate Marketing at C1.ai and writes much of the practical guidance published here, from third-party access management and the joiner-mover-leaver lifecycle to running an IAM risk assessment.
75 articles by Claire McKenna
GuideAgentic AI Security Risks: The OWASP Top 10 and How to Fix Them
Agentic AI security risks run through identity. See the OWASP Top 10 for Agentic Applications, what each risk looks like, and the controls that fix it.
- Guide
AI Agent Runtime Security: Governing What Agents Do
AI agent runtime security governs what an agent does while it runs. Learn tool call authorization, risk scoring, approval holds, and how to revoke access.
- Guide
Securing AI Agent Credentials: A Guide to Stopping Secrets Sprawl
AI agents hold credentials nobody owns or rotates. Learn where agent secrets sprawl, why vaults built for humans fall short, and how to lock them down.
- Guide
Shadow AI: How to Discover and Govern Unsanctioned AI
Shadow AI is any AI tool, agent, or MCP server running without approval or an owner. Learn where it hides, why DLP and EDR miss it, and how to govern it.
Guide13 IGA Best Practices for Modern Identity Security
Identity governance failures are behind some of the most costly breaches of the last decade. C1.ai outlines 13 proven IGA best practices that help security teams enforce least privilege, automate access lifecycles, and stay continuously audit-ready in 2026.
- Guide
How to Conduct an IAM Risk Assessment
Step-by-step IAM risk assessment methodology covering identity inventory, access control gap analysis, orphaned accounts, SoD violations, privilege escalation risks, and automated remediation. Built for security and IT teams in regulated industries.
GuideThird-Party Access Management
Third-party breaches cost organizations $4.91M on average. Learn how to secure vendor and contractor access with Zero Trust, JIT access, and automated lifecycle controls from C1.ai.
- Guide
Vendor Access Management
Unmanaged vendor access is one of the top causes of enterprise data breaches. Learn how to govern the full vendor identity lifecycle — from onboarding to automated offboarding — with C1.ai.
BlogAudit Proofing Your AI Implementation
Brad Thies (BARR Advisory) and Will Bengtson (C1.ai CISO) on how to govern AI adoption without slowing it down: access, risk, documentation, and the frameworks that actually matter.
BlogGoverning AI at Enterprise Speed: Announcing C1.ai integrations for Claude, OpenAI, and Cursor
C1.ai now governs the three most widely adopted AI platforms in the enterprise — Claude, OpenAI, and Cursor — with the same unified visibility, dynamic policy enforcement, and automated lifecycle workflows that cover your entire stack.
BlogAI Access Management: Your Questions, Answered
Security, IT, and GRC teams have questions about governing AI agent access. Here are the answers — from authentication and credentials to approvals, compliance, and license savings.
BlogFrom Risk Signal to Governance Action: Introducing C1.ai + CrowdStrike Falcon Next-Gen Identity Security
Announcing a new strategic integration between C1.ai and CrowdStrike Falcon® Next-Gen Identity Security. Falcon risk scores now ingest directly into C1.ai — attached to identities, actionable as conditions in governance policies, and capable of triggering automated access decisions the moment risk changes.
- Blog
Three Properties Identity Must Have in the Agentic Era
Identity governance was failing before AI agents arrived. With multiple agents per employee spawning their own, here's what infrastructure must look like to survive.
BlogYour AI Strategy Has a Blind Spot
AI governance isn't a new silo. It's an identity problem. See how identity-first governance makes every team AI-native without sacrificing control.
- Blog
Introducing Functions: Extend Identity Governance With Custom Code, Built Directly Into C1.ai
Extend identity governance with C1.ai Functions. Write and run custom TypeScript code securely to automate workflows, provisioning, and policy logic.
- Blog
How RRCU Uses C1 Automations to Streamline Identity Operations
Automate identity governance with C1 Automations. See how Red River Credit Union streamlined onboarding, offboarding, access reviews, and platform migrations using no-code workflows, AI optimization, and real-time identity data to reduce manual effort and improve security.
- Guide
Access Request Management: The Complete Guide for Security Teams
A complete guide to access request management for security teams. Learn how to balance employee productivity with least privilege, automate approvals, and eliminate rubber-stamping.
GuideThe Joiner-Mover-Leaver Process for IAM
Discover how to modernize your Joiner, Mover, and Leaver process for IAM with event-driven architecture, zero-touch provisioning, and real-time governance.
BlogWhat Identity Governance Looks Like When Automation Does the Work
What does identity governance look like when automation does the work? New data from C1.ai customers shows how organizations govern access at scale with policy and automation.
- Blog
The Modern IGA RFP Guide: How to Choose the Right Identity Governance Platform in 2026
Finding the right IGA solution in 2026 can be a challenge. Learn how to build an effective RFP, evaluate vendors, and choose a platform that simplifies identity security, scales with your business, and accelerates time to value.
- Guide
Top 5 Challenges in IGA (and How to Solve Them)
Modern IGA challenges have evolved beyond manual spreadsheets. Learn how to tackle AI risks, non-human identities, and data quality issues to build a scalable governance program.
BlogMeet Automations Architect: Build Automated Workflows in Minutes
Meet Automations Architect, our AI assistant for identity automation. Build, edit, and deploy secure workflows using natural language.
- Blog
The IGA Maturity Curve: Shifting from Reviews to Assurance
A GRC leader’s take on why manual UARs are breaking down and what continuous identity assurance looks like in practice.
- Guide
13 Step Vendor Offboarding Checklist for Legal & IT Teams
This 13-step vendor offboarding checklist covers access revocation, contract review, data destruction, and compliance documentation for security & IT teams.
- Blog
Take Full Control of Identity Data with Advanced Attribute Mapping in Super Directory
Learn how Super Directory uses fallback mappings and CEL expressions to precisely map user attributes and match identities across apps in C1.ai.
- Blog
Why User Access Reviews Are Becoming a Relic of the Past
UARs aren’t enough for modern identity risk. Discover how continuous, policy-driven controls replace review-centric governance without breaking audits.
- Guide
Contractor Access Management Process for Security Teams
Mismanaged contractor access is one of the most exploited attack vectors in enterprise security. This guide covers the frameworks and tools to lock it down.
- Blog
10 IGA Metrics Every Security Team Should Use to Measure Success
Still measuring IGA by checklists? Learn the identity governance metrics that show real risk reduction and efficiency in 2026.
- Blog
NIST’s New Cyber AI Profile Signals a Shift: AI Security Starts With Identity
NIST released a new Cyber AI Profile outlining how to secure AI at scale. See why identity is central to AI security and what teams must do next.
- Blog
How Dynamic Access Enables Least Privilege
See how C1.ai enables dynamic access control using real-time context to grant and revoke access as work changes.
- Blog
Access Profiles: A Smarter Way to Manage and Provision Access
Learn what access profiles are in C1.ai, how they group entitlements, enable automation, and simplify access requests, reviews, and onboarding at scale.
- Blog
Incremental Sync: How C1.ai Keeps Identity Data Fresh in Real Time
Learn how the C1.ai incremental sync keeps identity and access data fresh using event-based updates for real-time identity governance.
- Guide
Key Differences Between JIT Access and Traditional PAM
Just-in-time (JIT) access and privileged access management (PAM) are methods of controlling and monitoring privileged access. Learn more about the important differences between the two and why JIT access may be the management method you need to stay secure.
- Guide
SCIM Provisioning Explained (+ Benefits and Limitations)
Learn what SCIM provisioning is, the benefits of using SCIM, common SCIM workflows, and the limitations of SCIM in this ultimate technical guide.
- Blog
Risks of Weak Identity Governance in 2026
Identity is the fastest-growing attack surface in 2026. See how weak identity governance, manual UARs, and AI agents increase risk.
- Blog
Human vs. Non-Human Identities Explained
Discover how non-human identities like service accounts and AI agents work, why they create new security risks, and how to govern them effectively.
- Blog
Identity Maturity in 2026: How the Best Teams Move Forward
Learn how leading teams build visibility, governance, and automation to reduce risk and scale securely.
- Blog
SoD in Modern Identity Security: How C1.ai Prevents Access Conflicts Before They Become Risk
Learn how C1.ai detects, prevents, and remediates access conflicts to enforce separation of duties and strengthen your identity security program.
- Blog
So Long, Standing Access: Inside Instacart’s Just-In-Time Access Playbook
Learn how Instacart built a fully automated, policy-driven, engineering friendly just-in-time (JIT) access program with C1.ai.
- Blog
Introducing Our Advanced Microsoft Teams Integration: Identity Security Where Your Team Works
C1.ai now brings secure access workflows directly into Microsoft Teams, helping employees complete reviews and requests without switching tools. Reduce friction, speed up decisions, and improve adoption with identity security that fits naturally into the flow of work.
- Blog
Here's What Your Auditor Thinks About Agentic AI
Learn how agentic AI is changing the audit process, magnifying risk fundamentals, and raising the compliance floor.
- Blog
Meet Super Directory: Identity Orchestration Starts Here
Introducing Super Directory, our single source of truth for identity data. Standardize attributes, manage profile types and groups, automate updates across your stack, and strengthen security with clean, consistent, centralized identity management.
- Blog
How Tide Uses C1.ai to Operationalize Least Privilege at Scale
Modernizing identity at scale: See how Tide adopted C1.ai and Terraform to move from static, role-based access to needs-based least privilege, automate birthright and just-in-time access, and streamline approvals for 2,000 users across critical systems.
- Blog
How Weaviate Automated Privileged Access And Turned Zero Trust Into A Customer Win
C1.ai helped Weaviate eliminate standing access and cut manual access management from two days to two hours per week with fully automated JIT workflows.
- Blog
Building Trust Through Connector Reliability
Reliable IGA connectors are critical to identity security. Learn how C1.ai ensures trust and accuracy with anomaly detection, monitoring, and safe controls.
- Blog
The Power of Policies in C1.ai
Discover how our flexible, layered policies automate access reviews, approvals, and least privilege at enterprise scale.
- Blog
Custom Connectors: Simplifying Integrations Without Code
Learn how C1.ai makes custom connectors fast and flexible with 300+ out-of-the-box integrations, YAML no-code options, and the Baton SDK. Simplify app onboarding, streamline identity governance, and scale your access management program with ease.
- Blog
Virtual Entitlements: Simplifying Access and Bundling Permissions
Discover how our virtual entitlements simplify identity management by translating technical group names into plain language and bundling permissions into intuitive apps. Learn real-world use cases that improve clarity, reduce IT overhead, and streamline access requests.
- Guide
Comparing Traditional vs AI-Powered IAM Systems
Is your rule-based IAM system enough? This guide compares traditional vs AI-powered IAM to demonstrate how AI delivers a more dynamic and secure approach.
- Blog
Managing Identity as Code: How to Use Terraform with C1.ai
Discover how Terraform and C1.ai turn identity management into code. Automate policies, rotate secrets, manage access profiles, and gain auditability for secure, efficient, and consistent identity governance.
- Blog
Accelerating Integrations with AI-Generated Connectors
Discover how C1.ai uses AI-generated connectors enable faster integrations, greater scalability, and complete visibility across your environment.
- Blog
Simplifying FedRAMP Compliance with C1.ai
Learn what FedRAMP is, why it matters for cloud service providers, and how C1.ai simplifies compliance with automated user access reviews, data accuracy reporting, and modern identity governance to accelerate authorization and reduce risk.
- Blog
From Manual to Intelligent: Using AI to Mature Your IGA Program
See how AI can mature your identity governance and administration (IGA) program. The C1.ai AI agent Thomas automates approvals, access reviews, and policy enforcement, while Copilot, an interactive assistant, streamlines workflows, surfaces risk insights, and guides smarter decisions. Scale governance for human and non-human identities, reduce IT overhead, and enforce least privilege at enterprise scale.
- Blog
How UAR Automation Improves Audit Readiness and Reduces Risk
Automate user access reviews to save time, cut risk, and boost audit readiness. See how C1.ai transforms UARs into continuous control.
- Blog
Security vs. Compliance: Bridging the Gap with C1.ai
Learn why modern identity governance must shift from checkbox compliance to a security-first approach with proactive access reviews, least privilege, and automation that keeps you audit-ready.
- Blog
Meet IVIP: A New Era of Identity Visibility
Discover Gartner’s new IVIP category and how C1.ai delivers unified identity visibility and intelligence to secure every identity.
- Blog
How Treasure Data Transformed User Access Reviews with C1.ai
Discover how Treasure Data transformed its user access review program from manual spreadsheets to intelligent, continuous reviews with C1.ai—cutting 160+ hours annually, expanding scope, and achieving meaningful security outcomes beyond compliance.
- Blog
Five Ways to Streamline SOX Compliance with C1.ai
C1.ai automates access reviews, centralizes reporting, and streamlines SOX compliance for faster, audit-ready results.
- Blog
Build vs. Buy for IGA: Why C1.ai Wins Every Time
Compare the true costs of building vs. buying an identity governance solution and see why C1.ai delivers faster, more cost‑effective, and future‑ready results.
- Blog
Four Ways to Use C1 Automations to Strengthen Security
Automate identity security with speed and precision. Learn how C1.ai Automations help security teams reduce risk, enforce least privilege, and respond to high-risk access changes in real time without adding operational overhead.
- Guide
4 Modern IAM Challenges & How to Solve Them
Learn the top modern IAM challenges, from multi-cloud complexity to security threats, and get actionable solutions to solve them effectively.
- Blog
U.S. vs. U.K. Perspectives on AI and Security
A firsthand look at how AI adoption, regulation, and security culture differ between the U.S. and U.K. and what that means for identity governance in a global world.
- Blog
How to Streamline IT Operations with C1 Automations
Learn how C1 Automations helps IT teams eliminate manual work, reduce license costs, and streamline access workflows at scale.
- Blog
Rethinking Identity for an AI-native Future
SaaS is being redefined by agentic AI. This blog explores how the shift is transforming identity security, creating new challenges and opportunities for platforms built to govern at AI scale.
- Blog
How to Automate ILM with C1.ai
Learn how to automate identity lifecycle management (ILM) with C1.ai to streamline onboarding, reduce risk, and simplify access changes across your organization.
- Blog
The Pressure Is Real: Inside the Stress and Resilience of Today’s Security Leaders
Explore how today’s security leaders are navigating rising identity threats, intense pressure, and limited resources—with resilience, urgency, and a mission-first mindset.
- Blog
Managing Non-Human Identity Risk in 2025
In 2025, non-human identities from service accounts to AI agents have become the fastest-growing and most urgent identity risk, forcing security teams to rethink access governance at scale. Learn more from our 2025 FIS report.
- Blog
The Cure for IGAD: Identity Governance Anxiety Disorder
At C1.ai, we talk to security and IT teams every day. And we’ve noticed a troubling trend. We’re not doctors, but the symptoms are hard to ignore. After years of watching identity pros suffer in silence, we’re finally giving the condition a name: Identity Governance Anxiety Disorder.
- Blog
Key Takeaways From the 2025 Future of Identity Security Report
The 2025 Future of Identity Security Report reveals how security leaders are accelerating into an AI-driven era: embracing risk, scaling up identity budgets, and rethinking access for both humans and machines. Read on for key trends shaping the next wave of identity security.
- Blog
The State of Agentic AI in Identity Security
Security leaders aren’t just experimenting with AI—they’re rapidly integrating agentic AI into high-stakes workflows like identity provisioning and network defense. The C1.ai 2025 Identity Security Outlook Report reveals that urgency is driving adoption, but with thoughtful strategies and real concern for risk.
- Blog
AI in Identity and Access Management: Are You Ready?
While AI transforms identity and access management, it creates urgent security risks. Understand the IAM challenges posed by AI agents & the path forward.
- Guide
Learn the Key Phases of Identity Lifecycle Management
Learn the key phases of identity lifecycle management, from user provisioning and modification to secure deprovisioning. Simplify the ILM process with C1.ai.
- Guide
The Identity and Access Provisioning Lifecycle Explained
Understand the identity and access provisioning lifecycle to ensure users get the right access promptly and securely, from onboarding to offboarding.
- Blog
Introducing Arbitrary Access Control by C1.ai
Embrace the chaos. Introducing Arbitrary Access Control: the first AI-powered access control tool designed to ignore your policies and do its own thing.
- Blog
Crawl, Walk, Run: Solving Your Identity Crisis
Managing identity security is increasingly complex, with blind spots, over-permissioned users, and the rise of non-human identities. A crawl, walk, run approach helps organizations gain visibility and automate identity governance for stronger security.