The release of Executive Order (EO) 14028 in May made it clear that identity and security professionals must prepare themselves for fundamental changes in how their programs operate. As we get to the end of 2021, we are getting further clarity on what those changes might look like. Most recently, this has come from new guidance drafted by the Office of Management and Budget (OMB) and Cybersecurity and Infrastructure Security Agency (CISA): a F...