ISPM has gone from a term we had to define in every meeting to a discipline Gartner now rates at early mainstream maturity. That is a real shift, and a good one. We are finally treating identity the way we treat cloud, data and applications: as an attack surface to measure an organization continuously rather than assume.