Compliance is a common source of confusion among CTOs. That’s especially true in the area of identity and access management (IAM), where some compliance management vendors are guilty of overcomplicating what’s required while at the same time delivering oversimplified templates — and this can create misconceptions.