IAM is a set of processes, policies, and tools for controlling user access to critical information within an organization.| CSO Online