SER-009 — Identity
**Security identities as decision support**—how organizations use identity **context** (privilege, relationships, access, uncertainty) to prioritize, investigate, and communicate. **Not** IAM product configuration, identity governance policy encyclopedia, or directory administration workflows.
SER-009 — Identity
Series: SER-009
Volume: VOL-003 Security Entities
Version: 1.0
Fundamental question: Why are identities central to modern security?
Pillar: PIL-IDENTITY
Season: SEA-007
Status: ✅ Complete — FROZEN (D1 drafts)
Review: Every 6 months (next: 2027-01-03)
Expansion: SER-009 v2.0 only
Learning path: LP-009
Prerequisite: SER-008 Assets (minimum: KID-CON-0089); Volume 1 and Volume 2 recommended
Purpose
Security identities as decision support—how organizations use identity context (privilege, relationships, access, uncertainty) to prioritize, investigate, and communicate. Not IAM product configuration, identity governance policy encyclopedia, or directory administration workflows.
Educational flow: Volumes 1–2 (how analysts think + intelligence) → SER-008 Assets → What analysts reason about — identities
Authority anchors: KID-GLS-0010, KID-ARC-0001
Volume 3 pattern: Every article closes with Why this matters for security decisions.
Foundation for: SER-010 Applications & Services
Reading order
| Order | KID | Article | Time |
|---|---|---|---|
| — | — | Prerequisite: SER-008; Volumes 1–2 recommended | — |
| 1 | KID-GLS-0010 | Identity | 3 min |
| 2 | KID-CON-0090 | Understanding Security Identities | 9 min |
| 3 | KID-CON-0091 | Identity vs Account | 8 min |
| 4 | KID-CON-0092 | Identity Context | 8 min |
| 5 | KID-CON-0093 | Identity Privilege and Blast Radius | 8 min |
| 6 | KID-GLS-0031 | Identity Privilege (term) | 3 min |
| 7 | KID-CON-0094 | Identity Relationships | 9 min |
| 8 | KID-CON-0095 | Unknown Identities | 8 min |
| 9 | KID-GLS-0032 | Unknown Identity (term) | 3 min |
| 10 | KID-CON-0096 | Identity Exposure and Access | 8 min |
| 11 | KID-CON-0097 | Identity in Investigations | 9 min |
| 12 | KID-CON-0098 | Common Misconceptions About Security Identities | 10 min |
| 13 | KID-CON-0099 | Security Identities as Decision Support | 10 min |
Practitioner questions answered
| Question | Primary KID |
|---|---|
| What is a security identity? | KID-CON-0090, KID-GLS-0010 |
| How is identity different from account? | KID-CON-0091, KID-FAQ-0047 |
| Why does context change identity meaning? | KID-CON-0092 |
| Why does privilege amplify blast radius? | KID-CON-0093, KID-GLS-0031 |
| Why do identity relationships matter? | KID-CON-0094 |
| What are unknown identities? | KID-CON-0095, KID-GLS-0032 |
| How does access change significance? | KID-CON-0096 |
| How use identities in investigation? | KID-CON-0097, KID-FAQ-0048 |
| What mistakes do teams make? | KID-CON-0098 |
| Why are identities central to security? | KID-CON-0099, KID-FAQ-0050 |
Glossary (series terms)
| KID | Term | Status |
|---|---|---|
| KID-GLS-0010 | Identity | ✅ shared |
| KID-GLS-0031 | Identity Privilege | ✅ new |
| KID-GLS-0032 | Unknown Identity | ✅ new |
| KID-GLS-0022 | Blast Radius | ✅ shared (SER-004) |
| KID-GLS-0023 | Decision Support | ✅ shared (VOL-001) |
FAQs (attached)
| KID | Question | Primary parent |
|---|---|---|
| KID-FAQ-0046 | What is a security identity? | KID-CON-0090 |
| KID-FAQ-0047 | Identity vs account difference? | KID-CON-0091 |
| KID-FAQ-0048 | Why identity changes investigation? | KID-CON-0097 |
| KID-FAQ-0049 | What are unknown identities? | KID-CON-0095 |
| KID-FAQ-0050 | Why identities central to security? | KID-CON-0099 |
Not in scope (v1.0)
- IAM product deployment and connector configuration
- Identity governance policy and access certification workflows
- HR or workforce identity lifecycle administration
- Privileged access management product tours
Knowledge debt (v1.0)
| ID | Component | Status |
|---|---|---|
| DEBT-S9-001 | Pillar hub PIL-IDENTITY | ⏳ |
| DEBT-S9-002 | Concept map MAP-IDENTITY-DECISIONS | ⏳ |
| DEBT-S9-003 | Learning path LP-009 formal INDEX | ⏳ |
| DEBT-S9-004 | D2 human review batch | ⏳ |
Collection statistics
| Asset type | Count |
|---|---|
| Educational articles | 10 |
| Glossary (series) | 3 |
| FAQ attachments | 5 |
| New KIDs | 17 |
| Cumulative KIDs | 184 |