Federal Zero Trust
ICAM
Identity, Credential, and Access Management, the federal program of record for managing the identities of employees, contractors, and partners across the federal civilian executive branch. ICAM is governed by the Federal Identity, Credential, and Access Management Architecture maintained by GSA at idmanagement.gov. ICAM covers identity proofing, credential issuance (including PIV cards under FIPS 201), and access management decisions at the application layer. OMB Memorandum M-22-09 makes enterprise ICAM a precondition for the identity pillar of the federal zero trust strategy: an agency cannot enforce zero trust if identities are managed application by application.