
		<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
			<channel>
				<title>Hameed Syed K · Product, Identity &amp; Agentic AI</title>
				<link>https://www.shkcorp.com/blog</link>
				<description>Notes from a technical product leader on product management, identity &amp; access management, and agentic AI — from 12 years of building enterprise software.</description>
				<language>en-us</language>
				<managingEditor>kshameed7@gmail.com (Hameed Syed K)</managingEditor>
				<webMaster>kshameed7@gmail.com (Hameed Syed K)</webMaster>
				<lastBuildDate>Wed, 04 Nov 2026 00:00:00 GMT</lastBuildDate>
				<atom:link href="https://www.shkcorp.com/tags/governance/feed.xml" rel="self" type="application/rss+xml"/>
				
		<item>
			<guid>https://www.shkcorp.com/blog/iam-chapter-10-capstone</guid>
			<title>IAM Chapter 10: One Page</title>
			<link>https://www.shkcorp.com/blog/iam-chapter-10-capstone</link>
			<description>The whole series on one page: ten chapters, seven ideas, and nine questions worth asking when a team tells you it is fine.</description>
			<pubDate>Wed, 04 Nov 2026 00:00:00 GMT</pubDate>
			<author>kshameed7@gmail.com (Hameed Syed K)</author>
			<category>iam</category><category>capstone</category><category>identity</category><category>governance</category><category>zero-trust</category><category>security</category><category>study-notes</category>
		</item>
	
		<item>
			<guid>https://www.shkcorp.com/blog/iam-chapter-8-part-1-standing-access</guid>
			<title>IAM Chapter 8, Part 1: What Nobody Removes</title>
			<link>https://www.shkcorp.com/blog/iam-chapter-8-part-1-standing-access</link>
			<description>Provisioning has an event for everything except &quot;this is no longer needed&quot;. Why recertification campaigns mostly do nothing, separation of duties as a combination problem, and least privilege made measurable.</description>
			<pubDate>Mon, 02 Nov 2026 00:00:00 GMT</pubDate>
			<author>kshameed7@gmail.com (Hameed Syed K)</author>
			<category>iam</category><category>governance</category><category>iga</category><category>recertification</category><category>sod</category><category>least-privilege</category><category>security</category><category>study-notes</category>
		</item>
	
		<item>
			<guid>https://www.shkcorp.com/blog/iam-chapter-8-part-2-privileged-access</guid>
			<title>IAM Chapter 8, Part 2: Blast Radius</title>
			<link>https://www.shkcorp.com/blog/iam-chapter-8-part-2-privileged-access</link>
			<description>Privilege is not a job title. It is how far the damage reaches. The four-question test for a privileged account, tiering as the one structural control, PAM as three separable things, what JIT elevation does and does not buy, and break-glass.</description>
			<pubDate>Tue, 03 Nov 2026 00:00:00 GMT</pubDate>
			<author>kshameed7@gmail.com (Hameed Syed K)</author>
			<category>iam</category><category>governance</category><category>pam</category><category>privileged-access</category><category>tiering</category><category>jit</category><category>break-glass</category><category>security</category><category>study-notes</category>
		</item>
	
		<item>
			<guid>https://www.shkcorp.com/blog/iam-chapter-8-part-3-export-control-and-evidence</guid>
			<title>IAM Chapter 8, Part 3: The Border Is the Person</title>
			<link>https://www.shkcorp.com/blog/iam-chapter-8-part-3-export-control-and-evidence</link>
			<description>IAM is not supporting export control. IAM is the enforcement mechanism. Deemed exports, why it had to be ABAC, the licence that silently expires, where these programmes actually fail, and why enforcement working does not produce audit evidence.</description>
			<pubDate>Tue, 03 Nov 2026 00:00:00 GMT</pubDate>
			<author>kshameed7@gmail.com (Hameed Syed K)</author>
			<category>iam</category><category>governance</category><category>export-control</category><category>itar</category><category>ear</category><category>abac</category><category>audit</category><category>security</category><category>study-notes</category>
		</item>
	
			</channel>
		</rss>
	