Identity security makes sure the right humans (and software bots) get the exact access they need and nothing more, using MFA, least-privilege, and strong credential management. In cloud-first networks, controlling identity is effectively controlling the perimeter.